2021-01-22

CVE-2021-21259 Jan 22, 17:15 MEDIUM POC PATCH This Month

HedgeDoc is open source software which lets you create real-time collaborative markdown notes. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2021-21260 Jan 22, 18:15 MEDIUM POC This Month

Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-22847 Jan 22, 09:15 HIGH This Week

Hyweb HyCMS-J1's API fail to filter POST request parameters. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2021-21270 Jan 22, 18:15 MEDIUM PATCH This Month

OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

CVE-2021-22849 Jan 22, 09:15 MEDIUM This Month

Hyweb HyCMS-J1 backend editing function does not filter special characters. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.