Skip to content
OpenAdvisories

Archive

23 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /23 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.1
    CVE-2021-41192 Scanner template

    Insecure default configuration

    Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without explicitly specifying the `REDASH_COOKIE_SECRET` or `REDASH_SECRET_KEY` environment variables, a default value is used for both that is the sa…

    getredash redash
  • High 8.8
    CVE-2021-38003 Exploited Public exploit EPSS 39%

    Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-35033

    A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-config…

    Zyxel NBG7815 series firmware WSQ50 series firmware WSR30 series firmware Network devices
  • High 7.1
    CVE-2021-36314

    Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticate…

    Dell CloudLink
  • High 7.1
    CVE-2021-36299 EPSS 30%

    Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerabilit…

    Dell Integrated Dell Remote Access Controller (iDRAC)
  • High 7.8
    CVE-2021-21561

    Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicio…

    Dell PowerScale OneFS
  • High 7.5
    CVE-2021-41281

    Path traversal in Matrix Synapse

    Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is…

    Matrix synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI
  • High 8.6
    CVE-2021-43775

    Arbitrary file reading vulnerability in Aim

    Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or b…

    aimhubio aim aim PyPI
  • High 7.8
    CVE-2021-43019

    Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability

    Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges unde…

    Adobe Creative Cloud (desktop component)