Skip to content
OpenAdvisories

Archive

7 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /7 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical —
    GHSA-2c83-wfv3-q25f

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ZMarkdown

    ### Impact A Remote Command Execution vulnerability was found in the rebber module, which allowed execution of arbitrary commands. The reported problem came from CodeBlocks, which could be escaped to insert malicious LaTeX. Anyone using `rebber` without sanit…

    rebber npm
  • Critical 9.3
    CVE-2021-32802

    Preview generation used third-party library not suited for user-generated content in Nextcloud server

    Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user provided file content. For some image types, the Nextcloud server was invoking a third-party library that wasn't suited for untrusted user-sup…

    Nextcloud security-advisories
  • Critical 10.0
    CVE-2021-39199

    Cross site scripting via unsafe defaults in remark-html

    remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input…

    remarkjs remark-html remark-html npm
  • Critical 9.8
    CVE-2021-40539 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with result…

    KEV Nov 3, 2021
  • Critical 9.3
    CVE-2020-7819

    nTracker USB Enterprise SQL-Injection vulnerability

    A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information.

    nTrackSystem nTracker USB Enterprise
  • Critical 9.8
    CVE-2021-36163

    Unsafe deserialization in providers using the Hessian protocol

    In Apache Dubbo, users may choose to use the Hessian protocol. The Hessian protocol is implemented on top of HTTP and passes the body of a POST request directly to a HessianSkeleton: New HessianSkeleton are created without any configuration of the serializati…

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo Maven