Skip to content
OpenAdvisories

Archive

8 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /8 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.9
    CVE-2021-41253

    Possible heap buffer overflow when using zycore string functions in formatter hooks

    Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffe…

    zyantific zydis zydis Debian
  • Medium 5.3
    CVE-2021-29843

    IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing me…

    IBM MQ Appliance
  • Medium 4.8
    CVE-2021-29735

    IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability …

    IBM Security Guardium
  • Medium 5.9
    CVE-2020-4160

    IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by th…

    IBM QRadar Network Security
  • Medium 5.4
    CVE-2020-4153

    IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…

    IBM QRadar Network Security
  • Medium 6.8
    CVE-2020-4152

    IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communicati…

    IBM QRadar Network Security
  • Medium 6.5
    CVE-2021-22051

    Request injection in Spring Cloud Gateway

    Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x user…

    org.springframework.cloud:spring-cloud-gateway Maven
  • Medium 5.5
    CVE-2021-37850

    Denial of service in ESET for Mac products

    ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.

    ESET spol. s.r.o. ESET Endpoint Security for macOS ESET Cyber Security ESET Endpoint Antivirus for macOS macOS
  • Medium 5.3
    CVE-2021-31602 Public exploit EPSS 52%

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. Th…

  • Medium 4.3
    CVE-2021-31600

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. Th…