Skip to content
OpenAdvisories

Archive

12 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /12 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-3322

    Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr

    Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3

    zephyrproject-rtos Zephyr
  • Medium 6.8
    CVE-2021-39184

    Sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API

    Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user…

    electron electron electron npm
  • Medium 5.3
    CVE-2021-38915

    IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM…

    IBM Data Risk Manager
  • Medium 5.9
    CVE-2021-38862

    IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to d…

    IBM Data Risk Manager
  • Medium 5.7
    CVE-2021-35494

    TIBCO JasperReports unauthorized access to temporary object

    The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIB…

    TIBCO Software TIBCO JasperReports Server TIBCO JasperReports Server for ActiveMatrix BPM TIBCO JasperReports Server - Community Edition
  • Medium 4.8
    CVE-2021-35214

    Session Management Vulnerability

    The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple active sessions in separate browser windows, it was observed a password or email address change could…

    SolarWinds Pingdom
  • Medium 4.3
    CVE-2021-42009

    Apache Traffic Control Traffic Ops Email Injection Vulnerability

    An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitr…

    Apache Software Foundation Apache Traffic Control github.com/apache/trafficcontrol Go