Archive
26 February 2021
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Unscored —
An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occu…
-
Unscored —CVE-2020-36079 Public exploit
Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attack…
-
Medium 5.2
DOS vulnerability for Quoted Quality CSV headers
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…
-
Unscored —CVE-2021-26903 Public exploit
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].
-
Unscored —CVE-2021-26904 Public exploit
LMA ISIDA Retriever 5.2 allows SQL Injection.