Archive
2 February 2021
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Critical 9.8
Prototype pollution in dotty
Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution.
-
Critical 9.8
Command Injection
This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js.
-
Critical 9.1
Path Traversal in loklak
loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak …
-
Critical 9.8
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead…
KEV Nov 3, 2021