Skip to content
OpenAdvisories

Archive

2 September 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2021-28550 Exploited EPSS 52%

    Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary …

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-34746 EPSS 18%

    Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability

    A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and log in to an affected device as an a…

  • Critical 9.8

    bash command injection in spark interpreter

    bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.