Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

623 matches found

NVD
NVD•added 2021/03/11 3:15 a.m.•64 views

CVE-2021-21364

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.5CVSS0.00282EPSS
SaveExploits0References2
OSV
OSV•added 2021/03/11 3:15 a.m.•28 views

CVE-2021-21364

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.5CVSS6.7AI score
SaveExploits0References2
NVD
NVD•added 2021/03/11 3:15 a.m.•38 views

CVE-2021-21363

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS0.00414EPSS
SaveExploits1References2
OSV
OSV•added 2021/03/11 3:15 a.m.•52 views

CVE-2021-21363

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb•added 2021/03/11 3:15 a.m.•10 views

CVE-2021-21364

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.5CVSS6.5AI score0.00282EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2021/03/11 3:15 a.m.•42 views

Design/Logic Flaw

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

2.1CVSS5.9AI score0.00414EPSS
SaveExploits1References2Affected Software1
OSV
OSV•added 2021/03/11 3:09 a.m.•58 views

GHSA-PC22-3G76-GM6J Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS6.6AI score0.00414EPSS
SaveExploits1References3
CVE
CVE•added 2021/03/11 3:05 a.m.•148 views

CVE-2021-21363

CVE-2021-21363 affects swagger-codegen prior to 2.4.19, where Unix-like systems share a global temporary directory. A collocated user can observe the creation of a temporary subdirectory in the shared temp dir and racing to complete its creation enables local privilege escalation by potentially a...

7CVSS5.5AI score0.00414EPSS
SaveExploits1References2Affected Software1
CVE
CVE•added 2021/03/11 3:05 a.m.•143 views

CVE-2021-21364

CVE-2021-21364 affects the open-source project swagger-codegen. On Unix-like systems, prior to version 2.4.19, a shared system temporary directory allows a local attacker to observe or exploit the creation of temporary files/directories with default permissions, enabling potential data exposure o...

5.5CVSS5.3AI score0.00282EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies•added 2021/03/11 12:00 a.m.•21 views

PT-2021-14446 · Oracle · Jdk

Name of the Vulnerable Software and Affected Versions: swagger-codegen versions prior to 2.4.19 Description: The issue affects generated code, which remains vulnerable until manually fixed. On Unix-Like systems, the system temporary directory is shared between all local users. When...

6.2CVSS5.8AI score0.00282EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/03/11 12:00 a.m.•3 views

CVE-2021-21364: Exposure of Sensitive Information to an Unauthorized Actor

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.5CVSS5.9AI score0.00282EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/03/11 12:00 a.m.•5 views

CVE-2021-21363: Creation of Temporary File in Directory with Insecure Permissions

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS5.8AI score0.00414EPSS
SaveExploits1References3
CNNVD
CNNVD•added 2021/03/10 12:00 a.m.•39 views

HugoMario swagger-codegen 信息泄露漏洞

HugoMario swagger-codegen is an application from HugoMario. It is used to automatically generate API client libraries generate SDKs, server stubs and documentation given an OpenAPI Spec. An information disclosure vulnerability exists in Swagger-codegen version 2.4.19. The vulnerability stems from...

5.5CVSS6.6AI score0.00282EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2021/03/10 12:00 a.m.•15 views

HugoMario swagger-codegen 安全漏洞

HugoMario swagger-codegen is an application from HugoMario. It is used to automatically generate API client libraries generate SDKs, server stubs and documentation given an OpenAPI Spec. A security vulnerability exists in swagger-codegen, which can be exploited by an attacker to append the conten...

7CVSS6.8AI score0.00414EPSS
SaveExploits1References3
Hacker One
Hacker One•added 2021/01/06 4:53 p.m.•41 views

GitLab: Stored XSS in repository file viewer

Summary There exists XSS in swagger-ui version used in GitLab open API viewer. The XSS exists due to the old version of DOMpurify used in swagger-ui that allows an attacker can inject any HTML elements with any attributes except script tag on the page. The XSS in POC requires 1 click anywhere on...

5.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC•added 2020/11/17 12:00 a.m.•12 views

The vulnerability of the Cascading Style Sheets (CSS) component of the Swagger UI tool for creating interactive documentation allows a attacker to perform a cross-site scripting attack.

The vulnerability of the Cascading Style Sheets CSS component of the Swagger UI tool for creating interactive documentation is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack...

10CVSS6.3AI score0.05734EPSS
SaveExploits1References4Affected Software2
vulnersOsv
vulnersOsv•added 2020/09/11 9:23 p.m.•6 views

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W992-2GMJ-9XXJ...

5.4AI score
SaveExploits0
OSV
OSV•added 2020/09/11 9:23 p.m.•10 views

GHSA-W992-2GMJ-9XXJ Cross-Site Scripting in swagger-ui

Versions of swagger-ui prior to 2.2.1 are vulnerable to Cross-Site Scripting XSS. The package allows HTML code in the swagger.apiInfo.description value without proper sanitization, which may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 2.2.1 or later...

6.8AI score
SaveExploits0References3
Github Security Blog
Github Security Blog•added 2020/09/11 9:23 p.m.•27 views

Cross-Site Scripting in swagger-ui

Versions of swagger-ui prior to 2.2.1 are vulnerable to Cross-Site Scripting XSS. The package allows HTML code in the swagger.apiInfo.description value without proper sanitization, which may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 2.2.1 or later...

3.5AI score
SaveExploits0References3Affected Software1
OSV
OSV•added 2020/09/11 9:22 p.m.•28 views

GHSA-22Q9-HQM5-MHMC Cross-Site Scripting in swagger-ui

Versions of swagger-ui prior to 2.2.1 are vulnerable to Cross-Site Scripting XSS. The package fails to encode output in GET requests. The request is meant to respond with Content-Type application/json which does not trigger the vulnerability but if the web server changes the header to text/html i...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder