Archive
31 July 2021
Vulnerabilities first published on this day (UTC), newest first.
6 results · Feed
-
Unscored —
A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access …
-
Unscored —
A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level…
-
Unscored —
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&us…
-
Unscored —
ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. Th…
-
Unscored —
ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <!ENTITY content, create…
-
Unscored —
admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in …