Skip to content
OpenAdvisories

Archive

29 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /29 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.5
    CVE-2021-43790

    Use After Free in lucet

    Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all versions published to crates.io that allows a use-after-free in an Instance object that could result in memory corruption, data race, or oth…

    bytecodealliance lucet lucet-runtime crates.io
  • High 8.5
    CVE-2021-43783

    Path Traversal in @backstage/plugin-scaffolder-backend

    @backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a malicious actor with write access to a registered scaffolder template is able to manipulate the template in a way that writes files to arb…

    backstage backstage @backstage/plugin-scaffolder-backend npm
  • High 8.8
    CVE-2021-42364

    Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the stats_page function found in the ~/stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and inc…

    Stetic Stetic Web / CMS
  • High 8.8
    CVE-2021-42358

    Contact Form With Captcha <= 1.6.2 Cross-Site Request Forgery to Reflected Cross-Site Scripting

    The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the ~/cfwc-form.php file during contact form submission, which made it possible for attackers to inject arbitrary web scripts in vers…

    Contact Form With Captcha Contact Form With Captcha Web / CMS
  • High 8.8
    CVE-2019-8922

    A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there…

    bluez bluez Debian Ubuntu