Skip to content
OpenAdvisories

Archive

27 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /27 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2021-39174 Public exploit

    Configuration leak

    Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various pas…

    fiveai Cachet cachethq/cachet Packagist
  • High 8.8
    CVE-2021-39173

    Forced reinstall

    Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges (User or Admin), can trick Cachet and install the instance again, leading to arbitrary code execution on the server. This issue was address…

    fiveai Cachet cachethq/cachet Packagist
  • High 8.8
    CVE-2021-39172 Public exploit EPSS 29%

    New line injection during configuration edition

    Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can exploit a new line injection in the configuration edition feature (e.g. mail settings) and gain arbitrary code execut…

    fiveai Cachet cachethq/cachet Packagist
  • High 7.2
    CVE-2021-32759

    Data Flow Sanitation Issue Fix

    OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4.15 and 20.0.13, it was possible for admin users to upload arbitrary executable files to the server. OpenMage versions …

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist
  • High 7.2
    CVE-2021-32758

    Layout XML Arbitrary Code Fix

    OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have …

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist
  • High 8.0
    CVE-2021-39169

    XSS vulnerability using dialog

    Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog to display a malicious string, leading to cross-site scripting (XSS). XSS could compromise the API request toke…

    misskey-dev misskey
  • High 7.5
    CVE-2021-40142

    In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS…