Skip to content
OpenAdvisories

Archive

10 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /10 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Unscored —
    GHSA-f2pc-rwv3-69mv

    XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags

    The neutralization that ammonia applied to `animate` and `set` was not applied to other forms of SVG animation, which can be used for XSS. The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. ```xml <…

    ammonia crates.io
  • Unscored —
    GHSA-69v2-w9vg-4g83

    Incorrect escaping for `url("")` functions in CSS style attributes

    In some cases, quotation marks in CSS url() functions are not escaped. This allows CSS injection. This feature is not enabled by default, so an application is vulnerable if, and only if, the style attribute is allowed and filter_style_properties is used. As a…

    ammonia crates.io
  • High 8.8
    CVE-2021-25966

    Orchard Core CMS - Improper Session Termination after Password Change

    In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still h…

    OrchardCore Users