Skip to content
OpenAdvisories

Archive

30 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /30 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.7
    CVE-2021-41101

    CORS `Access-Control-Allow-Origin` settings are too lenient

    wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS ` Access-Control-Allow-Origin ` header set by `nginz` is set for all subdomains of `.wire.com` (including `wire.com`). This means that if somebo…

    wireapp wire-server
  • Medium 5.9
    CVE-2021-29894

    IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algori…

    IBM Cloud Pak for Security
  • Medium 5.4
    CVE-2021-20578

    IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorize…

    IBM Cloud Pak for Security
  • Medium 6.1
    CVE-2021-20554

    IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users…

    IBM Sterling Order Management
  • Medium 5.4
    CVE-2021-24017

    An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign …

    Fortinet Fortinet FortiManager Network devices
  • Medium 6.1
    CVE-2021-25963

    Shuup - Reflected XSS in Error Page

    In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to the error page contents not escaped.

    shuup shuup shuup PyPI