Skip to content
OpenAdvisories

Archive

2 February 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8

    Prototype pollution in dotty

    Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution.

  • Critical 9.8

    Command Injection

    This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js.

  • Critical 9.1

    Path Traversal in loklak

    loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak …

  • Critical 9.8
    CVE-2020-25506 Exploited Scanner template EPSS 100%

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead…

    KEV Nov 3, 2021