Skip to content
OpenAdvisories

Archive

17 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /17 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-41273

    Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys

    Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. Due to improperly configured CSRF protections on two routes, a malicious user could execute a CSRF-based attack against the following endpoints: Sending a test email a…

    pterodactyl panel pterodactyl/panel Packagist
  • Medium 6.7
    CVE-2021-0158

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • Medium 6.7
    CVE-2021-0157

    Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…

  • Medium 4.8
    CVE-2021-42361

    Contact Form Email <= 1.3.24 Authenticated Stored Cross-Site Scripting

    The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the ~/trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user …

    Contact Form Email Contact Form Email Web / CMS
  • Medium 6.5
    CVE-2021-43551

    OSIsoft PI Vision

    A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impac…

    OSIsoft PI Vision
  • Medium 6.5
    CVE-2021-42250

    Possible log injection

    Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Medium 6.2
    CVE-2021-38959

    IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of …

    IBM SPSS Statistics
  • Medium 6.2
    CVE-2021-29861

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sens…

    IBM AIX VIOS
  • Medium 6.2
    CVE-2021-29860

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library…

    IBM AIX VIOS
  • Medium 5.0
    CVE-2021-32600

    An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, …

    Fortinet Fortinet FortiOS Network devices