Skip to content
OpenAdvisories

Archive

11 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /11 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • High 7.9
    CVE-2021-34417

    Authenticated remote command execution with root privileges via web console in MMR

    The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.202…

    Zoom Video Communications Zoom On-Premise Meeting Connector MMR Zoom On-Premise Virtual Room Connector Load Balancer Zoom On-Premise Virtual Room Connector
  • Medium 4.0
    CVE-2021-34418

    Pre-auth Null pointer crash in on-premise web console

    The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-P…

    Zoom Video Communications Zoom On-Premise Meeting Connector MMR Zoom On-Premise Recording Connector Zoom On-Premise Virtual Room Connector Load Balancer
  • Low 3.7
    CVE-2021-34419

    HTML injection in Zoom Linux client

    In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social…

    Zoom Video Communications Zoom Client for Meetings for Ubuntu Linux Linux
  • Medium 4.7
    CVE-2021-34420

    Zoom Windows installation executable signature bypass

    The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.

    Zoom Video Communications Zoom Client for Meetings for Windows Windows
  • Low 3.7
    CVE-2021-34421

    Retained exploded messages in Keybase Clients for Android and iOS

    The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explo…

    Zoom Video Communications Keybase Client for Android Keybase Client for iOS Android iOS
  • High 7.2
    CVE-2021-34422

    Path traversal of file names in Keybase Client for Windows

    The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allo…

    Zoom Video Communications Keybase Client for Windows Windows
  • Medium 4.2
    CVE-2021-3912

    OctoRPKI crashes when processing GZIP bomb returned via malicious repository

    OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory (and thus crash).

    Cloudflare octorpki cfrpki github.com/cloudflare/cfrpki Debian Go
  • Medium 4.2
    CVE-2021-3911

    Misconfigured IP address field in ROA leads to OctoRPKI crash

    If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

    Cloudflare octorpki cfrpki github.com/cloudflare/cfrpki Debian Go
  • Medium 4.4
    CVE-2021-3910

    NUL character in ROA causes OctoRPKI to crash

    OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).

    Cloudflare octorpki cfrpki github.com/cloudflare/cfrpki Debian Go
  • Medium 4.4
    CVE-2021-3909

    Infinite open connection causes OctoRPKI to hang forever

    OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Specifically, the repository that OctoRPKI sends HTTP requests to will keep the connection open for a day before a respons…

    Cloudflare octorpki fort-validator cfrpki Debian Go
  • Medium 5.9
    CVE-2021-3908

    Infinite certificate chain depth results in OctoRPKI running forever

    OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

    Cloudflare octorpki cfrpki github.com/cloudflare/cfrpki Debian Go
  • High 7.4
    CVE-2021-3907

    Arbitrary filepath traversal via URI injection

    OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa), which would then be written to disk outside the base cache folder. This could allow for re…

    Cloudflare octorpki fort-validator fort-validator Debian Ubuntu Go
  • Critical 9.8
    CVE-2021-43350

    LDAP filter injection vulnerability in Traffic Ops

    An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter.

    Apache Software Foundation Apache Traffic Control github.com/apache/trafficcontrol Go
  • Unscored —
    CVE-2021-26558

    Deserialization of Untrusted Data

    Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI vers…

    Apache Software Foundation Apache ShardingSphere-UI
  • High 8.8
    CVE-2021-25980

    Talkyard - Host-Header Injection Leads to Account Takeover

    In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Host Header Injection. By luring a victim …

    debiki talkyard
  • Unscored —
    CVE-2021-43397

    LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.

  • Unscored —
    CVE-2021-42002

    Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code exe…

  • Unscored —
    CVE-2021-41833

    Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.

  • Unscored —
    CVE-2021-41081 Public exploit EPSS 64%

    Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration searc…

  • Unscored —
    CVE-2021-41080

    Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details se…

  • Unscored —
    CVE-2021-43573

    A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processi…

  • Unscored —
    CVE-2002-20001 Public exploit EPSS 25%

    The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that…

  • Unscored —
    CVE-2021-42847 Public exploit EPSS 70%

    Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.