Skip to content
OpenAdvisories

Archive

15 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /15 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-33045 Exploited Public exploit Scanner template EPSS 100%

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can b…

    KEV Aug 21, 2024
  • Critical 9.8
    CVE-2021-33044 Exploited Public exploit Scanner template EPSS 100%

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can b…

    KEV Aug 21, 2024
  • Critical —
    GHSA-q4h9-46xg-m3x9

    UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable

    ### Impact Upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. We will update this advisory with more information soon. ### Patches A fix is included in version 4.3.2 of `@openzeppelin…

    @openzeppelin/contracts-upgradeable npm
  • Critical 9.8
    CVE-2021-37913

    HGiga OAKlouds - Command Injection-2

    The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system…

    HGiga OAKlouds OAKSv3 OAKlouds OAKSv2
  • Critical 9.8
    CVE-2021-37912

    HGiga OAKlouds - Command Injection-1

    The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the sys…

    HGiga OAKlouds OAKSv2 OAKlouds OAKSv3
  • Critical 9.8
    CVE-2021-37909

    CHANGING Inc. TSSServiSignAdapter Windows Versions - Improper Input Validation

    WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code.

    Changing TSSServiSignAdapter
  • Critical 9.1
    CVE-2021-33701

    DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 20…

    SAP SAP S/4HANA DMIS Mobile Plug-In
  • Critical 9.9
    CVE-2021-33698

    SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script …

    SAP SAP Business One
  • Critical 9.9
    CVE-2021-33690 Public exploit Scanner template EPSS 69%

    Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Comp…

    SAP SAP NetWeaver Development Infrastructure (Component Build Service)
  • Critical 9.8
    CVE-2020-21125

    Remote code execution in UReport

    An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.

    com.bstek.ureport:ureport2-core Maven
  • Critical 9.8
    CVE-2021-38647 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
    KEV Nov 3, 2021
  • Critical 9.6
    CVE-2021-3751

    Out-of-bounds Write in bfabiszewski/libmobi

    libmobi is vulnerable to Out-of-bounds Write

    bfabiszewski bfabiszewski/libmobi