Skip to content
OpenAdvisories

Archive

1 September 2021

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • High 7.2
    CVE-2021-39115 Public exploit

    Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Adminis…

  • Unscored —
    CVE-2021-40379 Public exploit EPSS 22%

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 do…

  • Unscored —
    CVE-2021-40380 Public exploit EPSS 23%

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and se…

  • Unscored —
    CVE-2021-40381 Public exploit EPSS 23%

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allow…

  • Unscored —
    CVE-2021-40382 Public exploit EPSS 23%

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi all…

  • Unscored —
    CVE-2021-40378 Public exploit EPSS 15%

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/kill…

  • High 8.9
    CVE-2021-35215 Public exploit EPSS 70%

    ActionPluginBaseView Deserialization of Untrusted Data RCE

    Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

  • Unscored —
    CVE-2021-39379 Public exploit

    A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A m…

  • Unscored —
    CVE-2021-39377 Public exploit

    A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A m…

  • Unscored —
    CVE-2021-39378 Public exploit EPSS 23%

    A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A m…

  • Unscored —
    CVE-2021-40352 Public exploit

    OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can r…

  • Unscored —
    CVE-2021-40353 Public exploit

    A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application databas…