Archive

27 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /27 November 2021 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 3.5

CVE-2021-3901

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii firefly-iii/firefly-iii grumpydictator/firefly-iii Packagist

Oct 27, 2021
Low 3.7

CVE-2021-20526

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set …

IBM Planning Analytics

Oct 27, 2021
Low 3.1

CVE-2021-35236

Missing Secure Flag From SSL Cookie

The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to only send the cookie if the request is being sent over a secure channel such as HTTPS. This will help protect the cookie …

SolarWinds Kiwi Syslog Server

Oct 27, 2021