Skip to content
OpenAdvisories

Archive

4 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /4 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Unscored —
    CVE-2021-42008 Public exploit

    The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds wr…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 6.3
    CVE-2021-41091 Public exploit

    Insufficiently restricted permissions on data directory in Docker Engine

    Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing …

    moby moby docker.io docker.io Debian Ubuntu Alpine Go
  • Unscored —
    CVE-2021-39433 Public exploit

    A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific…

  • Unscored —
    CVE-2021-41651 Public exploit

    A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can …

  • High 7.5
    CVE-2021-32675 Public exploit EPSS 16%

    DoS vulnerability in Redis

    Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which determine the number of elements (in the multi-bulk header) and…

    Redis Redis redis redis Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-41579 Public exploit

    LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a vic…

  • Unscored —
    CVE-2021-35296 Public exploit

    An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via …

  • Unscored —
    CVE-2021-41511 Public exploit

    The username and password field of login in Lodging Reservation Management System V1 can give access to any user by usi…

  • Unscored —
    CVE-2021-41878 Public exploit

    A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enabl…

  • Medium 5.3
    CVE-2021-22557 Public exploit

    Code execution in SLO Generator via YAML Payload

    SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173

    Google SLO Generator slo-generator PyPI