Skip to content
OpenAdvisories

Archive

20 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /20 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Medium 5.4
    CVE-2021-34650

    eID Easy <= 4.6 Reflected Cross-Site Scripting

    The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the ~/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6.

    eID Easy eID Easy Web / CMS
  • Medium 6.1
    CVE-2021-39325

    OptinMonster <= 2.6.0 Reflected Cross-Site Scripting

    The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the load_previews function found in the ~/OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to…

    OptinMonster OptinMonster Web / CMS
  • Medium 5.8
    GHSA-wfrj-qqc2-83cm

    Remote command injection when using sendmail email transport

    ### Impact Sites using the `sendmail` transport as part of their `mail` config are vulnerable to remote command injection due to a [vulnerability](https://github.com/advisories/GHSA-48ww-j4fc-435p) in the `nodemailer` dependency. Ghost defaults to the `direct…

    ghost npm
  • Medium 4.1
    CVE-2020-8561

    Webhook redirect in kube-apiserver

    A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user ca…

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go
  • Medium 4.4
    CVE-2021-38899

    IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM…

    IBM Cloud Pak for Data
  • Medium 6.5
    CVE-2021-29856

    IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI …

    IBM Tivoli Netcool/OMNIbus
  • Medium 5.4
    CVE-2021-29821

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…

    IBM Tivoli Netcool/OMNIbus
  • Medium 5.4
    CVE-2021-29820

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…

    IBM Tivoli Netcool/OMNIbus
  • Medium 5.4
    CVE-2021-29819

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…

    IBM Tivoli Netcool/OMNIbus
  • Medium 5.4
    CVE-2021-29818

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…

    IBM Tivoli Netcool/OMNIbus
  • Medium 5.4
    CVE-2021-29817

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…

    IBM Tivoli Netcool/OMNIbus
  • Medium 4.9
    CVE-2021-29811

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text wh…

    IBM Tivoli Netcool/OMNIbus
  • Medium 6.4
    CVE-2021-29809

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …

    IBM Tivoli Netcool/OMNIbus
  • Medium 6.4
    CVE-2021-29808

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …

    IBM Tivoli Netcool/OMNIbus
  • Medium 6.4
    CVE-2021-29807

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …

    IBM Tivoli Netcool/OMNIbus
  • Medium 5.4
    CVE-2021-29806

    IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …

    IBM Tivoli Netcool/OMNIbus