Skip to content
OpenAdvisories

Archive

1 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /1 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-21176

    SQL Injection in thinkjs

    SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.

    thinkjs npm
  • Critical 9.6
    CVE-2020-13564 EPSS 76%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.6
    CVE-2020-13563 EPSS 76%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.6
    CVE-2020-13562 EPSS 78%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.8
    CVE-2021-23330

    Command Injection

    All versions of package launchpad are vulnerable to Command Injection via stop.

    launchpad npm
  • Critical 9.3
    CVE-2021-21276 Public exploit

    Privilege escalation in Polr

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' s…

    cydrobolt polr