|
197131
|
9.8 |
CRITICAL
Network
|
dynamoosejs
|
dynamoose
|
Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method …
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2021-21304
|
2024-11-21 14:47 |
2021-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197132
|
6.8 |
MEDIUM
Network
|
helm
|
helm
|
Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from versio…
|
-
|
CVE-2021-21303
|
2024-11-21 14:47 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197133
|
6.1 |
MEDIUM
Network
|
adobe
|
adobe_consulting_services_commons
|
ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correc…
|
-
|
CVE-2021-21043
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197134
|
7.5 |
HIGH
Network
|
typelevel
|
http4s
|
Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Http4s before versions 0.21.17, 0.22.0-M2, and 1.0.0-M14 have a vulnerability which can lead to a denial-of-ser…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-21294
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197135
|
7.5 |
HIGH
Network
|
typelevel
|
blaze
|
blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core before version 0.14.15 are affected by a vulnerability in which unbounded conn…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-21293
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197136
|
6.3 |
MEDIUM
Local
|
traccar
|
traccar
|
Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access t…
|
-
|
CVE-2021-21292
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197137
|
6.5 |
MEDIUM
Network
|
docker
debian
netapp
|
docker
debian_linux
e-series_santricity_os_controller
|
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain…
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2021-21285
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197138
|
6.1 |
MEDIUM
Network
|
oauth2_proxy_project
|
oauth2_proxy
|
OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group. In OAuth2…
|
-
|
CVE-2021-21291
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197139
|
8.3 |
HIGH
Network
|
mechanize_project
fedoraproject
debian
|
mechanize
fedora
debian_linux
|
Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and before version 2.7.7 there is a command injection vulnerability. Affected versi…
|
CWE-78
OS Command
|
CVE-2021-21289
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197140
|
6.8 |
MEDIUM
Adjacent
|
docker
debian
netapp
|
docker
debian_linux
e-series_santricity_os_controller
|
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using "--userns…
|
CWE-22
Path Traversal
|
CVE-2021-21284
|
2024-11-21 14:47 |
2021-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
