Skip to content
OpenAdvisories

Archive

31 July 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access …

  • Unscored —

    A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level…

  • Unscored —

    Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&us…

  • Unscored —

    ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. Th…

  • Unscored —

    ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <!ENTITY content, create…

  • Unscored —

    admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in …