Skip to content
OpenAdvisories

Archive

28 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /28 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.8
    CVE-2021-36297

    SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load …

    Dell SupportAssist Client Consumer
  • High 7.1
    CVE-2021-36286

    Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file delet…

    Dell SupportAssist Client Consumer
  • High 7.5
    CVE-2021-36283

    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…

    Dell CPG BIOS
  • High 8.2
    CVE-2021-21522

    Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vu…

    Dell CPG BIOS
  • High 7.5
    CVE-2021-41104

    web_server allows OTA update without checking user defined basic auth username & password

    ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which `web_server` allows over-the-air (OTA) updates without checking user defined basic …

    esphome esphome esphome PyPI
  • High 8.8
    CVE-2021-34636

    Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing nonce check which allows attackers to inje…

    wpdevart Countdown and CountUp, WooCommerce Sales Timers Web / CMS
  • High 7.6
    CVE-2021-33601

    Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper

    A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper serv…

    F-Secure F-Secure Internet Gatekeeper