Skip to content
OpenAdvisories

Archive

5 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /5 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2020-28502 Public exploit

    Arbitrary Code Injection

    This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into xhr.send could result in arbitrary code being injected and …

    xmlhttprequest-ssl node-xmlhttprequest-ssl node-xmlhttprequest node-xmlhttprequest Debian Ubuntu npm
  • Unscored —
    CVE-2020-29134 Public exploit EPSS 28%

    The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all …

  • Unscored —
    CVE-2020-5148 Public exploit

    SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing …

    SonicWall Directory Services Connector Network devices
  • Unscored —
    CVE-2021-27965 Public exploit EPSS 12%

    The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privile…

  • Unscored —
    CVE-2021-27963 Public exploit

    SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous …

  • Unscored —
    CVE-2021-27964 Public exploit EPSS 48%

    SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Co…