Skip to content
OpenAdvisories

Archive

12 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /12 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.0
    GHSA-qh54-9vc5-m9fg

    MD5 hash support in github.com/foxcpp/maddy

    ### Impact This vulnerability affects maddy 0.5.1, 0.5.0 users using auth.shadow module and an extremely outdated system that still allows MD5 hashes in /etc/shadows. ### Patches Patch is available as part of the 0.5.2 release. ### Workarounds Ensure MD5 hash…

    github.com/foxcpp/maddy Go
  • Low —
    GHSA-q324-q795-2q5p

    Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name

    ### Impact `preview-docs` command allows path traversal if current working dir contains files with question mark `?` in name and attacker knows the name. ### Patches It was patched starting from 1.0.0-beta.59 ### Workarounds Do not run openapi-cli preview-doc…

    @redocly/openapi-cli npm
  • Low 3.7
    CVE-2021-41136

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma

    Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using `puma` with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a…

    puma puma puma puma Debian RubyGems