Skip to content
OpenAdvisories

Archive

February 2021

Vulnerabilities first published in this month (UTC), newest first.

84 results · Clear filters · Feed

  • Critical 9.6
    CVE-2020-13563 EPSS 76%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.6
    CVE-2020-13562 EPSS 78%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.8

    Command Injection

    All versions of package launchpad are vulnerable to Command Injection via stop.

  • Critical 9.3
    CVE-2021-21276 Public exploit

    Privilege escalation in Polr

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' s…