Skip to content
OpenAdvisories

Archive

9 July 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2021-30116 Exploited · Ransomware EPSS 86%

    Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

    Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.…

    KEV Nov 3, 2021