Skip to content
OpenAdvisories

Archive

11 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /11 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.7
    CVE-2021-41117 Public exploit

    Insecure random number generation

    keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating id…

    juliangruber keypair keypair npm
  • High 8.8
    CVE-2021-39317

    AccessPress Themes - Authenticated Malicious File Upload

    A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in …

    AccessPress Themes accesspress-parallax revolve zigcy-baby Web / CMS
  • High 7.5
    CVE-2021-27665

    exacqVision Server 32-bit

    An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.

    Johnson Controls exacqVision Web Service
  • High 8.1
    CVE-2021-42135

    Incorrect Privilege Assignment in HashiCorp Vault

    HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policies and the Google Cloud secrets engine. Users may, in some situations, have more privileges than intended, e.g., a user with read permission…

    github.com/hashicorp/vault Go