Skip to content
OpenAdvisories

Archive

31 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /31 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2021-39164

    Improper authorisation of /members discloses room membership to non-members

    Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of a room if they know the ID of the room. The vulnerability …

    matrix-org synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI
  • Low 3.1
    CVE-2021-39163

    Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.

    Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulnerability is limited t…

    matrix-org synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI
  • Low 3.3
    CVE-2021-34563

    In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it

    In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH WHA-GW-F2D2-0-AS- Z2-ETH.EIP ICS / OT