Skip to content
OpenAdvisories

Archive

7 April 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2021-21425 Public exploit EPSS 80%

    Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

    Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Partic…

  • Unscored —
    CVE-2021-29627 Public exploit

    In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, list…

  • Unscored —
    CVE-2021-30147 Public exploit

    DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.