Skip to content
OpenAdvisories

Archive

4 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /4 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-8298 EPSS 11%

    Command injection in fs-path

    fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, and `removeSync` methods.

    fs-path npm
  • Critical 9.8
    CVE-2021-23344

    Remote Code Execution (RCE)

    The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set.

    total.js npm
  • Critical 9.8
    CVE-2020-24914

    qcubed PHP object injection

    A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafted POST request.

    qcubed/qcubed Packagist
  • Critical 9.8
    CVE-2020-24913 Public exploit EPSS 41%

    qcubed SQL injection vulnerability in profile.php via the strQuery parameter

    A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

    qcubed/qcubed Packagist
  • Critical 10.0
    CVE-2020-35628

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read …

    cgal cgal Debian Ubuntu
  • Critical 10.0
    CVE-2020-35636

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC…

    cgal cgal Debian Ubuntu
  • Critical 10.0
    CVE-2020-28601

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read …

    cgal cgal Debian Ubuntu
  • Critical 10.0
    CVE-2020-28636

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read …

    cgal cgal Debian Ubuntu