Skip to content
OpenAdvisories

Archive

15 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /15 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-29553

    Grav CMS Cross-Site Request Forgery (CSRF)

    The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website (CSRF).

    getgrav/grav Packagist
  • High 8.1
    CVE-2020-29555

    Grav CMS Arbitrary File Deletion

    The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploiting a path-traversal technique. (This vulnerability can also be exploited by an unauthenticated attack…

    getgrav/grav Packagist
  • High 7.5
    CVE-2021-27576

    Apache OpenMeetings: bandwidth can be overloaded with public web service

    If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0

    Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven