Skip to content
OpenAdvisories

Archive

30 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /30 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 5.8
    CVE-2021-41256

    Intent URI permissions manipulation in nextcloud news-android

    nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that…

    Nextcloud news-android Android
  • Medium 6.5
    CVE-2021-36329

    Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malic…

    Dell Dell EMC Streaming Data Platform
  • Medium 5.3
    CVE-2021-36327

    Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unau…

    Dell Dell EMC Streaming Data Platform
  • Medium 6.5
    CVE-2021-36326

    Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). …

    Dell Dell EMC Streaming Data Platform
  • Medium 6.5
    CVE-2021-4026

    Improper Access Control in bookstackapp/bookstack

    bookstack is vulnerable to Improper Access Control

    BookStackApp bookstackapp/bookstack ssddanbrown/bookstack Packagist
  • Medium 6.5
    CVE-2021-22095

    Deserialization of Untrusted Data in Spring AMQP

    In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message

    org.springframework.amqp:spring-amqp spring Ubuntu Maven
  • Medium 5.9
    CVE-2021-39000

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensit…

    IBM MQ Appliance
  • Medium 5.1
    CVE-2021-38999

    IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within tra…

    IBM MQ Appliance
  • Medium 5.1
    CVE-2021-38958

    IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Forc…

    IBM MQ Appliance
  • Medium 5.0
    CVE-2021-25987

    Hexo - Stored XSS

    Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

    Hexo Hexo hexo npm
  • Medium 4.3
    CVE-2021-42122

    Denial of Service via Invalid Object Attribute in TopEase

    Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to inser…

    Business-DNA Solutions TopEase
  • Medium 4.3
    CVE-2021-42121

    Denial of Service via Invalid Date Format in TopEase

    Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s date attribute(s) allows an authenticated remote attacker with Object Modification privileges to insert an unexpect…

    Business-DNA Solutions TopEase
  • Medium 6.5
    CVE-2021-42120

    Missing Character Length (Denial of Service) in TopEase

    Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long st…

    Business-DNA Solutions TopEase
  • Medium 4.3
    CVE-2021-42116

    Unauthorized Menu Item Access in TopEase

    Incorrect Access Control in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an authenticated remote attacker to view the Shape Editor and Settings, which are functionality for higher privileged users, via…

    Business-DNA Solutions TopEase