Skip to content
OpenAdvisories

Archive

20 April 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2020-35314 Public exploit EPSS 27%

    A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, a…

  • Unscored —
    CVE-2020-35313 Public exploit EPSS 45%

    A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in Wonde…

  • Unscored —
    CVE-2021-25681 Public exploit EPSS 11%

    AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. …

  • Unscored —
    CVE-2021-25680 Public exploit

    The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These…

  • Unscored —
    CVE-2021-25679 Public exploit

    The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. …

  • Unscored —
    CVE-2021-29155 Public exploit

    An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…