Skip to content
OpenAdvisories

Archive

29 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /29 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.0
    CVE-2021-1120

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the …

    NVIDIA NVIDIA Virtual GPU Software
  • High 7.1
    CVE-2021-1119

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a poin…

    NVIDIA NVIDIA Virtual GPU Software
  • High 7.8
    CVE-2021-1118

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to…

    NVIDIA NVIDIA Virtual GPU Software
  • High 7.2
    CVE-2021-41189

    Communities and collections administrators can escalate their privilege up to system administrator

    DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6.x or below. This is…

    DSpace DSpace org.dspace:dspace-api Maven
  • High 8.8
    CVE-2021-39179

    SQL Injection in DHIS2 Tracker API

    DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to execute arbitrary SQL commands via unspecifi…

    dhis2 dhis2-core
  • High 7.6
    CVE-2021-25742

    Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

    A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

    Kubernetes Kubernetes ingress-nginx