Skip to content
OpenAdvisories

Archive

8 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /8 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-41170

    Evaluation of closures can lead to execution of methods & functions in current program scope

    neoan3-apps/template is a neoan3 minimal template engine. Versions prior to 1.1.1 have allowed for passing in closures directly into the template engine. As a result values that are callable are executed by the template engine. The issue arises if a value has…

    sroehrl neoan3-template neoan3-apps/template Packagist
  • Critical 9.8
    CVE-2021-25979

    Apostrophe - Insufficient Session Expiration

    Apostrophe CMS versions prior to 3.3.1 did not invalidate existing login sessions when disabling a user account or changing the password, creating a situation in which a device compromised by a third party could not be locked out by those means. As a mitigati…

    Apostrophe Apostrophe apostrophe npm
  • Critical 9.8
    CVE-2021-34684

    Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries …