Skip to content
OpenAdvisories

Archive

26 July 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2021-36563 Public exploit

    The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the …

  • Unscored —
    CVE-2021-25804 Public exploit

    A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the …

  • Unscored —
    CVE-2021-25801 Public exploit

    A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to c…

  • High 7.5
    CVE-2021-32789 Public exploit EPSS 17%

    Arbitrary SQL (SQL injection) possible via the Store API component.

    woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a care…