Skip to content
OpenAdvisories

Archive

15 August 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Critical 9.0

    Stored XSS in “Dolibarr” leads to privilege escalation

    In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the “Private Note” field at “/adherents/note.php?id=1” endpoint. These script…

  • Unscored —
    CVE-2021-38699 Public exploit

    TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.

  • Unscored —

    NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.

  • Unscored —

    serde_cbor is unmaintained

    The `serde_cbor` crate is unmaintained. The author has archived the github repository. Alternatives proposed by the author: * [`ciborium`](https://crates.io/crates/ciborium) * [`minicbor`](https://crates.io/crates/minicbor)