Skip to content
OpenAdvisories

Archive

29 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /29 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.0
    CVE-2021-43788 EPSS 26%

    Path traversal in translator module of NobeBB

    Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory. The vulnerability has been patched as of v1.18.5. Users…

    NodeBB NodeBB nodebb npm
  • Medium 4.8
    CVE-2021-42365

    Asgaros Forums <= 1.15.13 Authenticated Stored XSS

    The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the ~/admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject a…

    Asgaros Forums Asgaros Forums Web / CMS
  • Medium 5.3
    CVE-2021-21707 Public exploit EPSS 25%

    Special characters break path parsing in XML functions

    In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function …

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2021-32061

    S3Scanner allows Directory Traversal

    S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element.

    s3scanner PyPI
  • Medium 6.5
    CVE-2019-8921

    An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ b…

    bluez bluez Debian Ubuntu