Skip to content
OpenAdvisories

Archive

22 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /22 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2021-38376

    OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of …

  • Unscored —
    CVE-2021-38375

    OX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e-mail message.

  • Unscored —
    CVE-2021-38374

    OX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader reference within an app loa…

  • Unscored —
    CVE-2021-38146 Scanner template EPSS 12%

    The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary…

  • Unscored —
    CVE-2021-33495

    OX App Suite 7.10.5 allows XSS via an OX Chat system message.

  • Unscored —
    CVE-2021-33494

    OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering.

  • Unscored —
    CVE-2021-43557 Public exploit EPSS 13%

    Path traversal in request_uri variable

    The uri-block plugin in Apache APISIX before 2.10.2 uses $request_uri without verification. The $request_uri is the full original request URI without normalization. This makes it possible to construct a URI to bypass the block list on some occasions. For inst…

    Apache Software Foundation Apache APISIX
  • Unscored —
    CVE-2021-33493

    The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.

  • Unscored —
    CVE-2021-33492

    OX App Suite 7.10.5 allows XSS via an OX Chat room name.

  • Unscored —
    CVE-2021-33491

    OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandli…

  • Unscored —
    CVE-2021-33490

    OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.

  • Unscored —
    CVE-2021-33489

    OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.

  • Unscored —
    CVE-2021-33488

    chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a dev…

  • Unscored —
    CVE-2021-44079

    In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl comma…