Skip to content
OpenAdvisories

Archive

17 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /17 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.4
    CVE-2020-13589

    An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management A…

  • Medium 5.4
    CVE-2020-13588

    An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management A…

  • Medium 5.5
    CVE-2021-0641

    In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifier…

    Android
  • Medium 5.5
    CVE-2021-0642

    In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permi…

    Android
  • Medium 5.5
    CVE-2021-0584

    In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This c…

    Android
  • Medium 6.6
    CVE-2021-3615

    A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code execution if a specific file …

    Lenovo Smart Camera X3, X5, and C2E firmware
  • Medium 6.8
    CVE-2021-3459

    A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow priv…

    Motorola MM1000 MoCA Adapter
  • Medium 6.1
    CVE-2021-3458

    The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter setti…

    Motorola MM1000 MoCA Adapter
  • Medium 4.7
    CVE-2021-25956

    Improper User Access Control in "Dolibarr" Leads to Account Takeover

    In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other user’s details but fails to validate already existing “Login” name, while renaming the user “Login”. This leads to complete account takeover o…

    Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 4.3
    CVE-2020-4992

    IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an a…

    IBM DataPower Gateway
  • Medium 5.4
    CVE-2020-4706

    IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of input…

    IBM API Connect