2021-03-21

2021-03-22

2021-03-23

All (2) Critical (2) High (10) Medium (19) Low (4)

CVE-2021-26295 Mar 22, 12:15 CRITICAL POC PATCH THREAT Act Now

Apache OFBiz has unsafe deserialization prior to 17.12.06. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Apache Deserialization Ofbiz

NVD

CVSS 3.1

9.8

EPSS

97.8%

CVE-2021-28955 Mar 22, 07:15 CRITICAL PATCH Act Now

git-bug before 0.7.2 has an Uncontrolled Search Path Element. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Git Bug

NVD GitHub

CVSS 3.1

9.8

EPSS

1.7%