Skip to content
OpenAdvisories

Archive

31 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /31 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-40085

    OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value

    An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

    neutron neutron neutron Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2021-35240

    Stored XSS via Help Server settings

    A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'.

    SolarWinds Orion Platform
  • Medium 5.5
    CVE-2021-21681

    Password stored in plain text by Jenkins Nomad Plugin

    Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

    Jenkins Project Jenkins Nomad Plugin org.jenkins-ci.plugins:nomad Web / CMS Maven
  • Medium 6.3
    CVE-2021-35221

    ImportAlert Improper Access Control Tampering Vulnerability

    Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.

    SolarWinds Orion Platform
  • Medium 6.0
    CVE-2021-35219

    ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability

    ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.

    SolarWinds Orion Platform
  • Medium 5.5
    CVE-2021-34564

    In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

    Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP WHA-GW-F2D2-0-AS- Z2-ETH ICS / OT
  • Medium 5.4
    CVE-2021-34562

    A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response

    In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH WHA-GW-F2D2-0-AS- Z2-ETH.EIP ICS / OT
  • Medium 5.5
    CVE-2021-34560

    A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

    In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH WHA-GW-F2D2-0-AS- Z2-ETH.EIP ICS / OT
  • Medium 5.4
    CVE-2021-34559

    A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings

    In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP WHA-GW-F2D2-0-AS- Z2-ETH ICS / OT