Skip to content
OpenAdvisories

Archive

5 November 2021

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2021-43405 Public exploit EPSS 36%

    An issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters (it is not constrained …

  • Unscored —
    CVE-2021-42671 Public exploit EPSS 20%

    An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitori…

  • Unscored —
    CVE-2021-42670 Public exploit

    A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the annou…

  • Unscored —
    CVE-2021-42669 Public exploit EPSS 23%

    A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which al…

  • Unscored —
    CVE-2021-42668 Public exploit

    A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_cl…

  • Unscored —
    CVE-2021-42667 Public exploit EPSS 16%

    A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-mana…

  • Unscored —
    CVE-2021-42666 Public exploit

    A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_ques…

  • Unscored —
    CVE-2021-42665 Public exploit

    An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of ind…

  • Unscored —
    CVE-2021-42664 Public exploit

    A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) …

  • Unscored —
    CVE-2021-42663 Public exploit

    An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via t…

  • Unscored —
    CVE-2021-42662 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System …

  • Critical 9.8
    CVE-2021-42237 Exploited · Ransomware Public exploit EPSS 98%

    Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where i…

    KEV Mar 25, 2022