Skip to content
OpenAdvisories

Archive

14 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /14 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High —
    GHSA-2rh5-jvgx-pgw3

    Any storage file can be downloaded from p.sh if full server path is known

    The default configuration for platform.sh (.platform.app.yaml) allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge,…

    ezsystems/ezplatform Packagist
  • High —
    GHSA-gqcf-83rq-gpfr

    Any storage file can be downloaded from p.sh if full server path is known

    The default configuration for platform.sh (.platform.app.yaml) allows access to uploaded files if you know or can guess their location, regardless of whether roles grant content read access to the content containing those files. If you're using Legacy Bridge,…

    ibexa/post-install Packagist
  • High 7.5
    CVE-2021-38177

    SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthentic…

    SAP_SE SAP CommonCryptoLib
  • High 8.3
    CVE-2021-33673

    Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and pers…

    SAP_SE SAP Contact Center
  • High 8.9
    CVE-2021-38162

    SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7…

    SAP_SE SAP Web Dispatcher
  • High 7.5
    CVE-2021-33737

    A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanc…

    Siemens SIMATIC CP 443-1 Advanced SIMATIC CP 443-1 SIPLUS NET CP 443-1 ICS / OT
  • High 7.5
    CVE-2021-39123

    Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the applica…

    Atlassian Jira Server Jira Data Center Web / CMS