Skip to content
OpenAdvisories

Archive

15 March 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2021-27946 Public exploit

    SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).

  • Unscored —
    CVE-2021-27890 Public exploit EPSS 11%

    SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.

  • Unscored —
    CVE-2021-27889 Public exploit

    Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.

  • Unscored —
    CVE-2021-27695 Public exploit

    Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbi…

  • Unscored —
    CVE-2021-28379 Public exploit

    web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allo…

  • Low 3.7
    CVE-2021-28378 Public exploit

    Cross-site Scripting in Gitea

    Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.