Skip to content
OpenAdvisories

Archive

16 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /16 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-18705

    Improper Restriction of XML External Entity Reference in Quokka

    XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

    quokka PyPI
  • Critical 9.8
    CVE-2020-18704

    Unrestricted Upload of File with Dangerous Type in django-widgy

    Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'.

    django-widgy PyPI
  • Critical 9.8
    CVE-2020-18703

    Improper Restriction of XML External Entity Reference in Quokka

    XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.

    quokka PyPI
  • Critical 9.8
    CVE-2020-18698

    Lin-CMS-Flask vulnerable to Improper Authentication

    Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.

    lin-cms PyPI
  • Critical 9.8
    CVE-2021-35394 Exploited Scanner template EPSS 100%

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled a…

    KEV Dec 10, 2021
  • Critical 9.8
    CVE-2021-35395 Exploited Scanner template EPSS 98%

    Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be …

    KEV Nov 3, 2021