Skip to content
OpenAdvisories

Archive

3 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /3 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

117 results · Feed

  • High 8.8
    CVE-2021-36569

    Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID t…

  • High 8.8
    CVE-2021-36444

    Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via f…

  • Critical 9.8
    CVE-2021-36424

    An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installati…

  • Medium 6.5
    CVE-2021-36489

    Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TG…

    allegro4.4 allegro5 allegro5 Debian Ubuntu
  • Medium 5.4
    CVE-2021-36425

    Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $fi…

  • Medium 5.4
    CVE-2021-36538

    Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run a…

  • Critical 9.1
    CVE-2021-36431

    SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie inform…

  • High 7.5
    CVE-2021-36493

    Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command.

    ipe Ubuntu
  • Critical 9.8
    CVE-2021-36503

    SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat par…

  • High 8.8
    CVE-2021-36426

    File Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via crafted file upload to in…

  • High 7.5
    CVE-2021-36544

    Incorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive information via path i…

  • Critical 9.1
    CVE-2021-36434

    SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie inform…

  • Medium 5.4
    CVE-2021-36545

    Cross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfg_copyrig…

  • Critical 9.1
    CVE-2021-36433

    SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie inform…

  • High 8.8
    CVE-2021-36443

    Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token v…

  • High 8.8
    CVE-2021-36570

    Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID t…

  • Medium 5.4
    CVE-2021-36712

    Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping functi…

  • High 7.5
    CVE-2021-37316

    SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remo…

  • Critical 9.1
    CVE-2021-37315

    Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.4163…

  • High 7.5
    CVE-2021-37306

    Insecure Permissions issue in jeecg-boot

    An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.

    org.jeecgframework.boot:jeecg-boot-base Maven
  • High 7.5
    CVE-2021-37304 Scanner template

    Insecure Permissions issue in jeecg-boot

    An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.

    org.jeecgframework.boot:jeecg-boot-base Maven
  • Medium 6.5
    CVE-2021-37234

    Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows r…

  • High 7.5
    CVE-2021-37501

    Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of servi…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2021-37305 Scanner template

    Insecure Permissions issue in jeecg-boot

    An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.

    org.jeecgframework.boot:jeecg-boot-base Maven
  • Unscored —
    CVE-2021-37377

    Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to …

  • Medium 5.5
    CVE-2021-37519

    Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted a…

    memcached memcached Debian Ubuntu
  • Medium 5.4
    CVE-2021-37502

    Cross site scripting in automad/automad

    Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.

    automad/automad Packagist
  • Critical 9.8
    CVE-2021-37497

    SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafte…

  • Unscored —
    CVE-2021-37376

    Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows…

  • High 7.5
    CVE-2021-37311

    Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the …

    fcitx5 fcitx5 Debian Ubuntu
  • Medium 5.4
    CVE-2021-37374

    Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary…

  • Medium 5.4
    CVE-2021-37373

    Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attac…

  • Medium 5.4
    CVE-2021-37378

    Cross Site Scripting (XSS) vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote …

  • Unscored —
    CVE-2021-37379

    Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitra…

  • Medium 6.1
    CVE-2021-37518

    Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run…

  • Unscored —
    CVE-2021-37375

    Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote…

  • Critical 9.1
    CVE-2021-37317

    Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allow…