Skip to content
OpenAdvisories

Archive

11 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /11 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.9
    CVE-2021-34417

    Authenticated remote command execution with root privileges via web console in MMR

    The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.202…

    Zoom Video Communications Zoom On-Premise Meeting Connector MMR Zoom On-Premise Virtual Room Connector Zoom On-Premise Recording Connector
  • High 7.2
    CVE-2021-34422

    Path traversal of file names in Keybase Client for Windows

    The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allo…

    Zoom Video Communications Keybase Client for Windows Windows
  • High 7.4
    CVE-2021-3907

    Arbitrary filepath traversal via URI injection

    OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa), which would then be written to disk outside the base cache folder. This could allow for re…

    Cloudflare octorpki fort-validator cfrpki Debian Ubuntu Go
  • High 8.8
    CVE-2021-25980

    Talkyard - Host-Header Injection Leads to Account Takeover

    In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Host Header Injection. By luring a victim …

    debiki talkyard