Skip to content
OpenAdvisories

Archive

17 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /17 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.3
    CVE-2021-39218

    Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime

    Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out-of-bounds read and write bug when running Wasm that uses …

    bytecodealliance wasmtime
  • Medium 6.3
    CVE-2021-39219

    Wrong type for `Linker`-define functions when used across two `Engine`s

    Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust library the `wasmtime` crate clearly marks which functions are safe and which are `unsafe`, guaranteeing that if…

    bytecodealliance wasmtime
  • Medium 6.3
    CVE-2021-39216

    Use after free passing `externref`s to Wasm in Wasmtime

    Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug when passing `externref`s from the host to guest Wasm content. To trigger the bug, you have to explicitly pass …

    bytecodealliance wasmtime wasmtime wasmtime PyPI crates.io
  • Medium 6.2
    CVE-2021-39227

    Fix prototype pollution in the zrender merge and clone helper methods

    ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src/core/util.ts` module results in prototype pollution. It affects the popular data visualization libr…

    ecomfe zrender zrender npm
  • Medium 6.5
    CVE-2021-39228

    Memory Safety Issue when using patch or merge on state and assign the result back to state

    Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`. In this case, aff…

    tremor-rs tremor-runtime tremor-script crates.io
  • Medium 5.0
    CVE-2021-31842

    XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 20…

    McAfee,LLC McAfee Endpoint Security (ENS) for WIndows Windows
  • Medium 5.3
    CVE-2021-39327 Public exploit EPSS 72%

    BulletProof Security <= 5.1 Sensitive Information Disclosure

    The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database…

    AITpro BulletProof Security Web / CMS
  • Medium 6.7
    CVE-2021-3812

    Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

    adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    pi-hole pi-hole/adminlte
  • Medium 6.7
    CVE-2021-3811

    Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

    adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    pi-hole pi-hole/adminlte