Skip to content
OpenAdvisories

Archive

26 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /26 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.6
    CVE-2021-41078 Public exploit

    Nameko Arbitrary code execution due to YAML deserialization

    Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.

    nameko PyPI
  • Unscored —
    CVE-2021-20837 Public exploit EPSS 88%

    Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Mova…

    Six Apart Movable Type
  • Unscored —
    CVE-2021-40345 Public exploit EPSS 23%

    An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upl…

  • Medium 6.5
    CVE-2021-41184 Public exploit EPSS 41%

    XSS in the `of` option of the `.position()` util

    jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

    jquery jquery-ui jQuery.UI.Combined org.webjars.npm:jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  • Medium 6.5
    CVE-2021-41182 Public exploit EPSS 39%

    XSS in the `altField` option of the Datepicker widget

    jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…

    jquery jquery-ui drupal7 jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems