Skip to content
OpenAdvisories

Archive

6 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /6 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.3
    CVE-2021-24006 Public exploit

    An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker wi…

    Fortinet Fortinet FortiManager Network devices
  • Medium 4.3
    CVE-2020-15939

    An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may all…

    Fortinet Fortinet FortiSandbox Network devices
  • Medium 5.2
    CVE-2021-36096

    Support Bundle includes S/Mime and PGP secret or PIN

    Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x versi…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 5.3
    CVE-2021-36095

    User enumeration issue using "lost password" feature

    Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 5.7
    CVE-2021-36094

    XSS attack in appointment edit popup screen

    It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 5.3
    CVE-2021-36093

    DoS attack using PostMaster filters

    It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; …

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 6.5
    CVE-2021-25735 Public exploit

    Validating Admission Webhook does not observe some previous fields

    A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at leas…

    Kubernetes Kubernetes kubernetes k8s.io/kubernetes Debian Alpine Go
  • Medium 5.4
    CVE-2021-3768

    Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

    bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    BookStackApp bookstackapp/bookstack
  • Medium 5.4
    CVE-2021-3767

    Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

    bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    BookStackApp bookstackapp/bookstack
  • Medium 5.9
    CVE-2021-40528

    The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two …

    libgcrypt20 libgcrypt20 libgcrypt Debian Ubuntu Alpine