Archive

11 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /11 November 2021 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.5

CVE-2021-23448

Prototype Pollution

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.

config-handler npm

Oct 11, 2021
Medium 6.7

CVE-2021-25738

Code exec via yaml parsing

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

Kubernetes Kubernetes Java Client io.kubernetes:client-java Maven

Oct 11, 2021
Medium 5.5

CVE-2021-22263

An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting f…

GitLab GitLab gitlab Web / CMS Ubuntu

Oct 11, 2021
Medium 6.1

CVE-2021-42134

Cross-site Scripting in django-unicorn

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

django-unicorn PyPI

Oct 11, 2021
Medium 5.3

CVE-2021-41800

MediaWiki allows a denial of service

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist

Oct 11, 2021