Skip to content
OpenAdvisories

Archive

16 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /16 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-43048

    TIBCO PartnerExpress Click-Jacking vulnerability

    The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A succes…

    TIBCO Software TIBCO PartnerExpress
  • Critical 9.0
    CVE-2021-43047

    TIBCO PartnerExpress Cross Site Scripting vulnerabilities

    The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate use…

    TIBCO Software TIBCO PartnerExpress
  • Critical 9.8
    CVE-2021-3958 EPSS 15%

    SQL Injection Vulnerability in Ipack SCADA Software

    Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0.

    Ipack Automation Systems Ipack SCADA Software
  • Critical 9.0
    CVE-2021-42114

    Scalable Rowhammering In the Frequency Domain to Bypass TRR Mitigations On Modern DDR4/LPDDR4X Devices

    Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, a…

    Samsung SK Hynix Micron Technology Micron lpddr4
  • Critical 9.8
    CVE-2021-37580 Public exploit Scanner template EPSS 41%

    Apache ShenYu Admin bypass JWT authentication

    A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0

    Apache Software Foundation Apache ShenYu Admin org.apache.shenyu:shenyu-admin Maven