Skip to content
OpenAdvisories

Archive

14 October 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2021-38295 Public exploit

    Privilege escalation vulnerability when using HTML attachments

    In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code e…

  • Unscored —
    CVE-2021-42342 Public exploit EPSS 59%

    An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be pass…