Skip to content
OpenAdvisories

Archive

13 December 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2021-24946 Public exploit EPSS 73%

    Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection

    The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated SQL inj…

  • Unscored —
    CVE-2021-44848 Public exploit EPSS 23%

    In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication reque…