2021-02-14

2021-02-15

2021-02-16

All (2) Critical (5) High (11) Medium (2)

CVE-2021-25299 Feb 15, 13:15 MEDIUM POC THREAT This Month

Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 97.7%.

PHP XSS Nagios Xi Nagios

NVD GitHub VulDB

CVSS 3.1

6.1

EPSS

97.7%

Threat

5.7

CVE-2021-23336 Feb 15, 13:15 MEDIUM POC PATCH THREAT This Month

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Python Information Disclosure Debian Oracle Django +14

NVD GitHub

CVSS 3.1

5.9

EPSS

36.0%