Skip to content
OpenAdvisories

Archive

21 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /21 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2021-27516

    URIjs Hostname spoofing via backslashes in URL

    URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

    urijs npm
  • Unscored —
    CVE-2021-27513 Public exploit EPSS 28%

    The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files beca…

  • Unscored —
    CVE-2021-27514

    EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-…

  • Unscored —
    CVE-2021-26716

    Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.

  • Medium 5.3
    CVE-2021-27515

    Path traversal in url-parse

    url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

    node-url-parse url-parse node-url-parse Debian Ubuntu npm