Skip to content
OpenAdvisories

Archive

26 August 2021

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Medium 4.4

    Cross-site scripting via category name in Discourse

    Discourse is an open source platform for community discussion. In affected versions category names can be used for Cross-site scripting(XSS) attacks. This is mitigated by Discourse's default Content Security Policy and this vulnerability only affects sites wh…

  • Medium 6.2

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to …

  • Medium 5.6

    IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. I…

  • Medium 6.2

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial …

  • Medium 6.5

    IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial o…

  • Medium 4.4

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  • Medium 6.3

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  • Medium 6.0

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  • Medium 5.3

    Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass

    Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or lo…

  • Medium 6.5

    Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

    yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

  • Medium 6.1

    Cross-site scripting in feehicms

    Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.