Skip to content
OpenAdvisories

Archive

29 November 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2021-44428 Public exploit

    Pinkie 2.15 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opco…

  • Medium 5.3
    CVE-2021-21707 Public exploit EPSS 25%

    Special characters break path parsing in XML functions

    In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function …

  • Critical 9.8
    CVE-2021-44077 Exploited Public exploit EPSS 94%

    Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014…

    KEV Dec 1, 2021