Skip to content
OpenAdvisories

Archive

2 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /2 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

97 results · Feed

  • Medium 5.9
    CVE-2021-29737

    IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of…

    IBM InfoSphere Information Server
  • Unscored —
    CVE-2021-36794

    In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications…

  • Unscored —
    CVE-2021-42568

    Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function v…

  • Unscored —
    CVE-2021-36925

    RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users…

  • Unscored —
    CVE-2021-36924

    RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users…

  • Unscored —
    CVE-2021-36923

    RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users…

  • Unscored —
    CVE-2021-36922

    RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users…

  • Unscored —
    CVE-2021-42763

    Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the…

  • Unscored —
    CVE-2021-37842

    metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials c…

  • Unscored —
    CVE-2021-27722

    An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data…

  • Unscored —
    CVE-2020-35249

    Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name …

  • Unscored —
    CVE-2020-27406

    Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via t…

  • Medium 6.1
    CVE-2021-33611

    Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

    Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL

    vaadin vaadin vaadin-menu-bar com.vaadin:vaadin-bom Maven
  • Unscored —
    CVE-2021-36560

    Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads t…

  • Medium 5.3
    CVE-2021-3765

    Inefficient Regular Expression Complexity in validatorjs/validator.js

    validator.js is vulnerable to Inefficient Regular Expression Complexity

    validatorjs validatorjs/validator.js validator validator.js Ubuntu npm
  • Medium 6.5
    CVE-2021-25973

    Publify - Improper Authorization Leads to Guest Signup Restriction Bypass

    In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only.

    publify_core publify_core publify_core RubyGems
  • Unscored —
    CVE-2021-33593

    Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the a…

    NAVER NAVER Whale browser