Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

877 matches found

osv_cve
osv_cve•added 2021/03/11 3:15 a.m.•57 views

CVE-2021-21363

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb•added 2021/03/11 3:15 a.m.•16 views

CVE-2021-21363

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS6.8AI score0.00414EPSS
SaveExploits1References3Affected Software1
Prion
Prion•added 2021/03/11 3:15 a.m.•46 views

Design/Logic Flaw

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

2.1CVSS5.9AI score0.00414EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb•added 2021/03/11 3:15 a.m.•14 views

CVE-2021-21364

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.5CVSS6.5AI score0.00282EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv•added 2021/03/11 3:09 a.m.•4 views

ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21364 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)

io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21364 Source advisory: OSV:GHSA-HPV8-9RQ5-HQ7W...

5.5CVSS0.00282EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2021/03/11 3:09 a.m.•3 views

ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21364 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)

io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21364 Source advisory: GHSA-HPV8-9RQ5-HQ7W...

5.5CVSS0.00282EPSS
SaveExploits0
osv_ghsa
osv_ghsa•added 2021/03/11 3:09 a.m.•72 views

GHSA-PC22-3G76-GM6J Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS6.6AI score0.00414EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv•added 2021/03/11 3:09 a.m.•3 views

ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21363 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)

io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21363 Source advisory: OSV:GHSA-PC22-3G76-GM6J...

7CVSS0.00414EPSS
SaveExploits1
CVE
CVE•added 2021/03/11 3:05 a.m.•174 views

CVE-2021-21363

CVE-2021-21363 affects swagger-codegen prior to 2.4.19, where Unix-like systems share a global temporary directory. A collocated user can observe the creation of a temporary subdirectory in the shared temp dir and racing to complete its creation enables local privilege escalation by potentially a...

7CVSS5.5AI score0.00414EPSS
SaveExploits1References2Affected Software1
Mend
Mend•added 2021/03/11 3:05 a.m.•9 views

CVE-2021-21363

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS0.00414EPSS
SaveExploits1References3
Mend
Mend•added 2021/03/11 3:05 a.m.•11 views

CVE-2021-21364

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.6CVSS0.00282EPSS
SaveExploits0References3
CVE
CVE•added 2021/03/11 3:05 a.m.•152 views

CVE-2021-21364

CVE-2021-21364 affects the open-source project swagger-codegen. On Unix-like systems, prior to version 2.4.19, a shared system temporary directory allows a local attacker to observe or exploit the creation of temporary files/directories with default permissions, enabling potential data exposure o...

5.5CVSS5.3AI score0.00282EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/03/11 12:00 a.m.•11 views

CVE-2021-21364: Exposure of Sensitive Information to an Unauthorized Actor

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...

5.5CVSS5.9AI score0.00282EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/03/11 12:00 a.m.•12 views

CVE-2021-21363: Creation of Temporary File in Directory with Insecure Permissions

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...

7CVSS5.8AI score0.00414EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies•added 2021/03/11 12:00 a.m.•11 views

PT-2021-14445

Name of the Vulnerable Software and Affected Versions swagger-codegen versions prior to 2.4.19 Description The system's temporary directory is shared between all users on Unix-like systems, allowing a collocated user to observe and race to complete the creation of a temporary subdirectory. This i...

9.3CVSS0.00414EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies•added 2021/03/11 12:00 a.m.•26 views

PT-2021-14446 · Oracle · Jdk

Name of the Vulnerable Software and Affected Versions: swagger-codegen versions prior to 2.4.19 Description: The issue affects generated code, which remains vulnerable until manually fixed. On Unix-Like systems, the system temporary directory is shared between all local users. When...

6.2CVSS5.8AI score0.00282EPSS
SaveExploits0References8
CNNVD
CNNVD•added 2021/03/10 12:00 a.m.•22 views

HugoMario swagger-codegen security vulnerabilities

HugoMario swagger-codegen is an application from HugoMario. It is used to automatically generate API client libraries generate SDKs, server stubs and documentation given an OpenAPI Spec. A security vulnerability exists in swagger-codegen, which can be exploited by an attacker to append the conten...

7CVSS6.8AI score0.00414EPSS
SaveExploits1References3
CNNVD
CNNVD•added 2021/03/10 12:00 a.m.•46 views

HugoMario swagger-codegen information leakage vulnerability

HugoMario swagger-codegen is an application from HugoMario. It is used to automatically generate API client libraries generate SDKs, server stubs and documentation given an OpenAPI Spec. An information disclosure vulnerability exists in Swagger-codegen version 2.4.19. The vulnerability stems from...

5.5CVSS6.6AI score0.00282EPSS
SaveExploits0References3
Hacker One
Hacker One•added 2021/01/06 4:53 p.m.•43 views

GitLab: Stored XSS in repository file viewer

Summary There exists XSS in swagger-ui version used in GitLab open API viewer. The XSS exists due to the old version of DOMpurify used in swagger-ui that allows an attacker can inject any HTML elements with any attributes except script tag on the page. The XSS in POC requires 1 click anywhere on...

5.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC•added 2020/11/17 12:00 a.m.•15 views

CSS Component XSS

The vulnerability of the Cascading Style Sheets CSS component of the Swagger UI tool for creating interactive documentation is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack...

10CVSS6.3AI score0.05734EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder