Skip to content
OpenAdvisories

Archive

21 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /21 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2021-41127

    Maliciously Crafted Model Archive Can Lead To Arbitrary File Write in rasa

    Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model `tar.gz` file which allows a malicious actor to craft a `model.tar.gz…

    RasaHQ rasa rasa PyPI
  • High 8.8
    CVE-2021-39321

    Sassy Social Share 3.3.23 PHP Object Injection

    Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to deserialization of unvalidated user supplied inputs via the import_config function found in the ~/admi…

    Sassy Social Share Sassy Social Share Web / CMS
  • High 7.2
    CVE-2021-39352 Public exploit EPSS 56%

    Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload

    The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it …

    Catch Themes Demo Import Catch Themes Demo Import Web / CMS
  • High 8.8
    CVE-2021-41146

    Arbitrary command execution on Windows in qutebrowser

    qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserur…

    qutebrowser qutebrowser qutebrowser PyPI
  • High 8.8
    CVE-2021-29873

    IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of servic…

    IBM SAN Volume Controller Spectrum Virtualize Software FlashSystem V9000
  • High 7.8
    CVE-2021-1529

    Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit …

    Cisco Cisco IOS XE SD-WAN Software iOS Network devices