Skip to content
OpenAdvisories

Archive

14 April 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    SQL Injection via in django-debug-toolbar

    A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.

  • Critical 9.8

    This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion…

  • Critical 9.8

    Stack Buffer Overflow in Surveillance Station

    A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following ver…