Skip to content
OpenAdvisories

Archive

31 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /31 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36381

    Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

    aaptjs npm
  • Critical 9.8
    CVE-2020-36379

    Vulnerability in remove function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

    aaptjs npm
  • Critical 9.8
    CVE-2020-36380

    Vulnerability in crunch function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

    aaptjs npm
  • Critical 9.8
    CVE-2020-36377

    Vulnerability in dump function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

    aaptjs npm
  • Critical 9.8
    CVE-2020-36378

    Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

    aaptjs npm
  • Critical 9.8
    CVE-2020-36376

    Vulnerability in list function leads to arbitrary code execution via filePath parameters

    An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

    aaptjs npm
  • Critical 9.1
    CVE-2020-26705

    XML External Entity vulnerability in Easy-XML

    The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via a crafted external entity entered into the XML content as i…

    easy-xml PyPI
  • Critical 9.1
    CVE-2020-25911

    XML External Entity vulnerability in MODX CMS

    A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS).

    modx/revolution Packagist