Skip to content
OpenAdvisories

Archive

1 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /1 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-41862

    Expression injection in AviatorScript

    AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).

    com.googlecode.aviator:aviator Maven
  • Critical 9.6
    CVE-2021-3825

    Missing Authorization Checks in LiderAhenk

    On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials.

    TUBITAK Lider
  • Critical 9.1
    CVE-2021-41110

    CWL Viewer: deserialization of untrusted data can lead to complete takeover by an attacker

    cwlviewer is a web application to view and share Common Workflow Language workflows. Versions prior to 1.3.1 contain a Deserialization of Untrusted Data vulnerability. Commit number f6066f09edb70033a2ce80200e9fa9e70a5c29de (dated 2021-09-30) contains a patch.…

    common-workflow-language cwlviewer