Skip to content
OpenAdvisories

Archive

14 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /14 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2021-42340 EPSS 12%

    DoS via memory leak with WebSocket connections

    The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket c…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Maven
  • High 8.8
    CVE-2021-42228

    Cross Site Request Forgery in kindeditor

    A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.

    kindeditor npm
  • High 8.8
    CVE-2021-38346

    Brizy <= 2.3.11 Authenticated Unrestricted File Upload and Path Traversal

    The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a location of their choice using the brizy_create_block_screenshot AJAX action. The file would be named using the id parameter, which could be prep…

    Brizy.io Brizy - Page Builder
  • High 7.1
    CVE-2021-38345

    Brizy <= 1.0.125 and 1.0.127 – 2.3.11 Incorrect authorization checks allowing Post modification

    The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-admin directory to modify the content of any existing post or page created with the Brizy editor. An i…

    Brizy.io Brizy - Page Builder
  • High 8.8
    CVE-2021-22964

    DOS and Open Redirect with user input

    A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//youtube.com/%2e%2e%2f…

    fastify-static npm