Skip to content
OpenAdvisories

Archive

7 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /7 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2021-42071 Public exploit EPSS 70%

    In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metachara…

  • Critical 9.8
    CVE-2021-42013 Exploited · Ransomware Public exploit EPSS 100%

    Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

    It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories a…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
    KEV Nov 3, 2021
  • High 7.5
    CVE-2021-40978 Public exploit EPSS 15%

    Directory traversal in mkdocs

    The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://g…

    mkdocs python-mkdocs Debian PyPI
  • Unscored —
    CVE-2021-32172 Public exploit EPSS 66%

    Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in th…

  • Medium 6.1
    CVE-2021-42053 Public exploit

    Cross-site scripting in Unicorn framework

    The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

    django-unicorn PyPI