Skip to content
OpenAdvisories

Archive

29 March 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2021-26714 Public exploit

    The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access rest…

  • Unscored —
    CVE-2021-29267 Public exploit

    Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to …

  • Low 3.3
    CVE-2021-23358 Public exploit

    Arbitrary Code Injection

    The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.