Skip to content
OpenAdvisories

Archive

1 February 2021

Vulnerabilities first published on this day (UTC), newest first.

49 results · Feed

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in…

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified t…

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented c…

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the und…

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with…

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download …

  • Unscored —

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sendi…

  • Unscored —

    Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allow…

  • Critical 9.3
    CVE-2021-21276 Public exploit

    Privilege escalation in Polr

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' s…