Skip to content
OpenAdvisories

Archive

21 October 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.2
    CVE-2021-39352 Public exploit EPSS 56%

    Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload

    The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it …

  • Medium 5.3
    CVE-2021-41160 Public exploit

    Improper region checks in FreeRDP allow out of bound write to memory

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphic…

  • Unscored —
    CVE-2021-42327 Public exploit

    dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14…