Skip to content
OpenAdvisories

Archive

21 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /21 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.6
    CVE-2021-41087

    Improperly Implemented path matching for in-toto-golang

    in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticated attackers posing as functionaries (i.e., within a trusted set of users for a layout) are able to create attestations …

    in-toto in-toto-golang github.com/in-toto/in-toto-golang Go
  • Medium 5.6
    CVE-2021-23444

    Prototype Pollution

    This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath function.

    jointjs npm
  • Medium 5.4
    CVE-2021-23443

    Cross-site Scripting (XSS)

    This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used.

    edge.js Browsers npm
  • Medium 6.0
    CVE-2021-29795

    IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence o…

    IBM PowerVM Hypervisor