Skip to content
OpenAdvisories

Archive

8 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /8 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    GHSA-9wx7-jrvc-28mm

    Signature verification vulnerability in Stark Bank ecdsa libraries

    An attacker can forge signatures on arbitrary messages that will verify for any public key. This may allow attackers to authenticate as any user within the Stark Bank platform, and bypass signature verification needed to perform operations on the platform, su…

    starkbank-ecdsa starkbank-ecdsa starkbank-ecdsa com.starkbank:ecdsa-java npm Maven PyPI NuGet
  • High —
    GHSA-qm7x-rc44-rrqw

    Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

    ### Impact In certain configurations, Apollo Server serves the client-side web app "GraphQL Playground" from the same web server that executes GraphQL operations. This web app has access to cookies and other credentials associated with the web server's operat…

    apollo-server npm
  • High 7.5
    CVE-2021-39182

    Use of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py

    EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The v…

    Morgan-Phoenix EnroCrypt enrocrypt PyPI
  • High 7.1
    CVE-2021-31601

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. Th…

  • High 8.8
    CVE-2021-31599

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A …