Skip to content
OpenAdvisories

Archive

9 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /9 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Unscored —
    CVE-2021-36798 Public exploit

    A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allo…

  • Unscored —
    CVE-2021-24507 Public exploit EPSS 11%

    Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

    The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and authenticated user) befo…

    Web / CMS
  • Unscored —
    CVE-2021-24499 Public exploit EPSS 60%

    Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution

    The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbi…

    Web / CMS