Skip to content
OpenAdvisories

Archive

26 August 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2021-39165 Public exploit

    Unauthenticated SQL Injection

    Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the da…

  • High 8.2
    CVE-2021-32648 Exploited Public exploit EPSS 91%

    Account Takeover in Octobercms

    octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been pat…

    KEV Jan 18, 2022