Skip to content
OpenAdvisories

Archive

31 October 2021

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Critical 9.8

    Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

  • Critical 9.8

    Vulnerability in remove function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

  • Critical 9.8

    Vulnerability in crunch function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

  • Critical 9.8

    Vulnerability in dump function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

  • Critical 9.8

    Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

  • Critical 9.8

    Vulnerability in list function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

  • Unscored —

    An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code v…

  • Critical 9.1

    XML External Entity vulnerability in Easy-XML

    The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via a crafted external entity entered into the XML content as i…

  • Unscored —

    Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers…

  • Unscored —

    A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.1…

  • Critical 9.1

    XML External Entity vulnerability in MODX CMS

    A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS).