Skip to content
OpenAdvisories

Archive

23 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /23 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

95 results · Feed

  • Unscored —
    CVE-2021-39289

    Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmw…

  • Unscored —
    CVE-2021-39245

    Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affe…

  • Unscored —
    CVE-2021-39244

    Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xt…

  • Unscored —
    CVE-2021-39243

    Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. T…

  • Critical 9.1
    CVE-2021-38598

    OpenStack Neutron vulnerable to hardware address impersonation

    OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server inst…

    neutron neutron neutron Debian Ubuntu PyPI
  • High 7.5
    CVE-2021-39371

    XML External Entity Injection in PyWPS

    An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

    pywps pywps pywps Debian Ubuntu PyPI
  • Unscored —
    CVE-2020-18773

    An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of se…

    exiv2 exiv2 Debian Ubuntu
  • Unscored —
    CVE-2020-18774

    A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial…

    exiv2 exiv2 Debian Ubuntu
  • Unscored —
    CVE-2020-18771

    Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which…

    exiv2 exiv2 Debian Ubuntu
  • Unscored —
    CVE-2020-36478

    An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm param…

    mbedtls mbedtls Debian Ubuntu
  • Unscored —
    CVE-2020-36475

    An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations perfo…

    mbedtls mbedtls Debian Ubuntu
  • Unscored —
    CVE-2020-36477

    An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected co…

    mbedtls mbedtls Debian Ubuntu
  • Unscored —
    CVE-2020-36476

    An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroi…

    mbedtls mbedtls Debian Ubuntu
  • High 8.5
    CVE-2021-39144 Exploited Public exploit Scanner template EPSS 98%

    XStream is vulnerable to a Remote Command Execution attack

    XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affec…

    x-stream xstream com.thoughtworks.xstream:xstream libxstream-java Debian Ubuntu Maven
    KEV Mar 10, 2023
  • Unscored —
    CVE-2021-37750

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointe…

    krb5 krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine