Skip to content
OpenAdvisories

Archive

16 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /16 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.2
    CVE-2021-38949

    IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local …

    IBM MQ
  • Medium 4.4
    CVE-2021-38882

    IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records bef…

    IBM Spectrum Scale
  • Medium 6.1
    CVE-2021-25984

    FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality

    In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting (XSS) at the “post reply” section. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies.

    FactorJS Factor
  • Medium 6.1
    CVE-2021-25983

    FactorJS - Reflected Cross-Site Scripting (XSS) in Tags and Categories Functionality

    In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “tags” and “category” parameters in the URL. An unauthenticated attacker can execute malicious JavaScript code and…

    FactorJS Factor
  • Medium 6.1
    CVE-2021-25982

    FactorJS - Reflected Cross-Site Scripting (XSS) in Search Functionality

    In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “search” parameter in the URL. An unauthenticated attacker can execute malicious JavaScript code and steal the sessi…

    FactorJS Factor
  • Medium 4.3
    CVE-2021-42337

    TVN-202110009

    The permission control of AIFU cashier management salary query function can be bypassed, thus after obtaining general user’s permission, the remote attacker can access account information except passwords by crafting URL parameters.

    AIFU Information Technology Co. CASH