Skip to content
OpenAdvisories

Archive

18 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /18 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.2
    CVE-2021-27358 Scanner template EPSS 83%

    Denial of service in Grafana

    The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.

    grafana github.com/grafana/grafana Ubuntu Go
  • High 7.2
    CVE-2021-1287

    Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability

    A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the devic…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • High 7.6
    CVE-2021-21383

    XSS in Wiki.js

    Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content…

    requarks wiki
  • High 8.8
    CVE-2021-21627

    CSRF vulnerability in Jenkins Libvirt Agents Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains.

    Jenkins Project Jenkins Libvirt Agents Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  • High 7.5
    CVE-2021-23359

    Arbitrary Command Injection

    This affects all versions of package port-killer. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC wi…

    port-killer npm
  • High 7.0
    CVE-2021-22848

    HGiga MailSherlock - SQL Injection-2

    HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.

    HGiga MailSherlock MSR45/SSR45
  • High 7.5
    CVE-2020-27827

    A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a…

    openvswitch openvswitch openvswitch lldpd Debian Ubuntu Azure Linux Alpine