Skip to content
OpenAdvisories

Archive

11 January 2021

Vulnerabilities first published on this day (UTC), newest first.

84 results · Feed

  • Unscored —

    Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attacke…

  • Unscored —

    Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject maliciou…

  • Unscored —

    Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject maliciou…

  • Medium 6.8

    Injection in Redcarpet

    Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This …