Skip to content
OpenAdvisories

Archive

24 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /24 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical —
    GHSA-r64m-qchj-hrjp

    Webcache Poisoning in shopware/platform and shopware/core

    ### Impact Webcache Poisoning via X-Forwarded-Prefix and sub-request ### Patches We recommend updating to the current version 6.4.6.1. You can get the update to 6.4.6.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware…

    shopware/platform shopware/core Packagist
  • Critical 9.1
    CVE-2021-43778 Public exploit Scanner template EPSS 52%

    Path traversal in GLPI barcode plugin

    Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete…

    pluginsGLPI barcode
  • Critical 9.0
    CVE-2021-3554

    Improper Access Control vulnerability in the patchesUpdate API

    Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoi…

    Bitdefender GravityZone Endpoint Security Tools for Linux Unified Endpoint Linux
  • Critical 9.1
    CVE-2021-44140

    Arbitrary file deletion on logout

    Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki use…

    Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main Maven