Skip to content
OpenAdvisories

Archive

24 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /24 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.1
    CVE-2021-39156 Public exploit

    Fragments in Path May Lead to Authorization Policy Bypass

    Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitabl…

    istio istio istio.io/istio Go
  • Unscored —
    CVE-2021-30956 Public exploit

    A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state managem…

    Apple iOS and iPadOS iOS
  • Unscored —
    CVE-2021-30955 Public exploit

    A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, i…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2021-30937 Public exploit EPSS 17%

    A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvO…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2021-30862 Public exploit

    A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a …

    Apple iTunes U
  • High 7.8
    CVE-2021-30860 Exploited Public exploit EPSS 76%

    An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catal…

    Apple macOS watchOS iOS macOS iOS
    KEV Nov 3, 2021
  • High 8.8
    CVE-2021-30858 Exploited Public exploit EPSS 13%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, …

    Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • Unscored —
    CVE-2021-30853 Public exploit

    This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6. A malicious application may b…

    Apple macOS macOS
  • High 7.4
    CVE-2021-3712 Public exploit EPSS 48%

    Read buffer overruns processing ASN.1 strings

    ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io
  • Critical 9.8
    CVE-2021-3711 Public exploit EPSS 88%

    SM2 Decryption Buffer Overflow

    In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramet…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io