15 February 2021

7 results · Clear filters · Feed

• High 7.2
  CVE-2020-28337 Public exploit EPSS 17%

  Zip slip in Microweber

  A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an adminis…

  microweber/microweber Packagist
  Feb 15, 2021
• Unscored —
  CVE-2021-27211 Public exploit

  steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.

  steghide steghide Debian Ubuntu
  Feb 15, 2021
• Unscored —
  CVE-2020-35775 Public exploit EPSS 13%

  CITSmart before 9.1.2.23 allows LDAP Injection.

  Feb 15, 2021
• High 7.2
  CVE-2021-23337 Public exploit EPSS 20%

  Command Injection

  Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

  lodash node-lodash node-lodash lodash-es Debian Ubuntu npm RubyGems
  Feb 15, 2021
• High 8.8
  CVE-2021-25298 Exploited Public exploit EPSS 74%

  Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

  Feb 15, 2021

  KEV Jan 18, 2022
• High 8.8
  CVE-2021-25296 Exploited Public exploit EPSS 72%

  Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

  Feb 15, 2021

  KEV Jan 18, 2022
• High 8.8
  CVE-2021-25297 Exploited Public exploit EPSS 57%

  Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

  Feb 15, 2021

  KEV Jan 18, 2022