Skip to content
OpenAdvisories

Archive

19 February 2021

Vulnerabilities first published on this day (UTC), newest first.

44 results · Feed

  • Medium 4.3

    Regular expression Denial of Service in @progfay/scrapbox-parser

    A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.

  • Unscored —
    CVE-2021-27403 Public exploit

    Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS.

  • Unscored —
    CVE-2021-27404 Public exploit

    Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.

  • Unscored —
    CVE-2019-25024 Public exploit EPSS 28%

    OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_s…