Skip to content
OpenAdvisories

Archive

26 February 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2021-27198 Public exploit EPSS 13%

    An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occu…

  • Unscored —
    CVE-2020-36079 Public exploit

    Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attack…

  • Medium 5.2
    CVE-2020-27223 Public exploit EPSS 78%

    DOS vulnerability for Quoted Quality CSV headers

    In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…

  • Unscored —
    CVE-2021-26903 Public exploit

    LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].

  • Unscored —
    CVE-2021-26904 Public exploit

    LMA ISIDA Retriever 5.2 allows SQL Injection.