Skip to content
OpenAdvisories

Archive

3 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /3 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-18724 Public exploit

    Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 1…

  • Unscored —
    CVE-2020-18723 Public exploit

    Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code…

  • Critical 9.8
    CVE-2020-17523 Public exploit EPSS 86%

    Authentication bypass in Apache Shiro

    Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

    org.apache.shiro:shiro-web org.apache.shiro:shiro-spring org.apache.shiro:shiro-spring-boot-starter Maven
  • Unscored —
    CVE-2020-28653 Public exploit EPSS 78%

    Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution …

  • Unscored —
    CVE-2020-35667 Public exploit

    JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.