Skip to content
OpenAdvisories

Archive

1 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /1 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-41467

    Cross-site scripting in application/controllers/dropbox.php in JustWriting

    Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.

    hjue/justwriting Packagist
  • Medium 6.1
    CVE-2021-40926

    Cross-site scripting in demos/demo.mysqli.php in getID3

    Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

    php-getid3 php-getid3 james-heinrich/getid3 Debian Ubuntu Packagist
  • Medium 5.4
    CVE-2021-29110

    Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.

    Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.

    Esri Portal for ArcGIS
  • Medium 6.1
    CVE-2021-29109

    A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.

    A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser.

    Esri Portal for ArcGIS
  • Medium 5.4
    CVE-2021-38675

    Stored XSS Vulnerability in Image2PDF

    A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Imag…

    QNAP Systems Image2PDF
  • Medium 6.5
    CVE-2021-3710

    Apport info disclosure via path traversal bug in read_file

    An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.…

    Canonical Apport apport Ubuntu
  • Medium 6.5
    CVE-2021-3709

    Apport file permission bypass through emacs byte compilation errors

    Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-…

    Canonical Apport apport Ubuntu