Skip to content
OpenAdvisories

Archive

7 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /7 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.8
    CVE-2021-40725

    Adobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForm listbox that could result in arbitrary code execution in the context…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-40726

    Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForm field that could result in arbitrary code execution in the context o…

    Adobe Acrobat Reader
  • High 8.2
    CVE-2021-22958

    Server-Side Request Forgery vulnerability in concrete5

    A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP address to bypass the limitations in place for localhost allowing interaction with local services. Impact can vary depending on services expo…

    concrete5/concrete5 Packagist
  • High 7.5
    CVE-2021-40978 Public exploit Scanner template EPSS 15%

    Directory traversal in mkdocs

    The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://g…

    mkdocs python-mkdocs Debian PyPI