Skip to content
OpenAdvisories

Archive

29 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /29 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Low 3.3
    CVE-2021-23358 Public exploit

    Arbitrary Code Injection

    The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

    js-jquery underscore underscore underscore Debian Ubuntu Azure Linux npm
  • Unscored —
    CVE-2021-28936

    The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending…

  • Unscored —
    CVE-2021-28937 Scanner template

    The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) cont…

  • Unscored —
    CVE-2021-29274

    Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.

  • Unscored —
    CVE-2020-35137

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the …