Skip to content
OpenAdvisories

Archive

28 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /28 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.0
    CVE-2021-3745

    Unrestricted Upload of File with Dangerous Type in flatcore/flatcore-cms

    flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type

    flatcore flatcore/flatcore-cms
  • High 7.5
    CVE-2020-7875

    RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability

    DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

    RAONWiz DEXT5 Upload
  • High 7.5
    CVE-2021-22044

    Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign

    In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to `@Reque…

    org.springframework.cloud:spring-cloud-openfeign-core Maven
  • High 7.1
    CVE-2021-3823

    Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender Gravity…

    Bitdefender GravityZone Update Server
  • High 7.8
    CVE-2021-3576

    Privilege escalation via SeImpersonatePrivilege

    Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but withi…

    Bitdefender Total Security Endpoint Security Tools
  • High 7.8
    CVE-2021-3579

    Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

    Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This iss…

    Bitdefender Total Security ENdpoint Security Tools for Windows Windows