Skip to content
OpenAdvisories

Archive

24 August 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.1
    CVE-2021-39156 Public exploit

    Fragments in Path May Lead to Authorization Policy Bypass

    Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitabl…

  • High 7.8
    CVE-2021-30860 Exploited Public exploit EPSS 76%

    An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catal…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2021-30858 Exploited Public exploit EPSS 13%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, …

    KEV Nov 3, 2021
  • High 7.4
    CVE-2021-3712 Public exploit EPSS 48%

    Read buffer overruns processing ASN.1 strings

    ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…