Skip to content
OpenAdvisories

Archive

18 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /18 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.8
    CVE-2021-32602

    An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and belo…

    Fortinet Fortinet FortiPortal Network devices
  • Medium 4.8
    CVE-2021-39138

    New anonymous user session acts as if it's created with password

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can use the REST API to signup users and also allow users to login anonymously. Prior to version 4.5.1, when an anonymous user is first signed u…

    parse-community parse-server parse-server npm
  • Medium 5.8
    CVE-2021-34749

    Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability

    A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote attacker to bypass filtering technology on…

    Cisco Cisco Web Security Appliance (WSA) snort Network devices Ubuntu
  • Medium 6.5
    CVE-2021-34734

    Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability

    A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is d…

    Cisco Cisco Video Surveillance 7000 Series IP Cameras Network devices
  • Medium 6.7
    CVE-2021-34716

    Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as the root use…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Medium 4.7
    CVE-2021-34715

    Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability

    A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underlying operating syste…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Medium 5.4
    CVE-2021-1561

    Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability

    A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of anot…

    Cisco Cisco Content Security Management Appliance (SMA) Network devices
  • Medium 6.1
    CVE-2021-39286

    Cross-site scripting in pywb

    Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.

    pywb PyPI
  • Medium 5.3
    CVE-2021-23425

    Regular Expression Denial of Service (ReDoS)

    All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

    trim-off-newlines npm
  • Medium 6.5
    CVE-2021-32728

    End-to-end encryption device setup did not verify public key

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Des…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • Medium 4.0
    CVE-2021-21781

    An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. Th…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu