Archive
15 August 2021
Vulnerabilities first published on this day (UTC), newest first.
4 results · Feed
-
Critical 9.0
Stored XSS in “Dolibarr” leads to privilege escalation
In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the “Private Note” field at “/adherents/note.php?id=1” endpoint. These script…
-
Unscored —CVE-2021-38699 Public exploit
TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.
-
Unscored —
NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.
-
Unscored —
serde_cbor is unmaintained
The `serde_cbor` crate is unmaintained. The author has archived the github repository. Alternatives proposed by the author: * [`ciborium`](https://crates.io/crates/ciborium) * [`minicbor`](https://crates.io/crates/minicbor)