Skip to content
OpenAdvisories

Archive

November 2021

Vulnerabilities first published in this month (UTC), newest first.

← October 2021 2021 / November December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-44077 Exploited Public exploit EPSS 94%

    Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014…

    KEV Dec 1, 2021
  • Critical 9.1
    CVE-2021-43778 Public exploit EPSS 52%

    Path traversal in GLPI barcode plugin

    Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete…

    pluginsGLPI barcode
  • Critical 9.8
    CVE-2021-44026 Exploited Public exploit EPSS 70%

    Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

    roundcube roundcube Debian Ubuntu
    KEV Jun 22, 2023
  • Critical 10.0
    CVE-2021-41277 Exploited Public exploit EPSS 97%

    GeoJSON URL validation can expose server files and environment variables to unauthorized users

    Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment varia…

    metabase metabase
    KEV Nov 12, 2024
  • Critical 9.8
    CVE-2021-37580 Public exploit EPSS 41%

    Apache ShenYu Admin bypass JWT authentication

    A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0

    Apache Software Foundation Apache ShenYu Admin org.apache.shenyu:shenyu-admin Maven
  • Critical 10.0
    CVE-2021-41269 Public exploit

    Unauthenticated remote code injection in cron-utils

    cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, lead…

    jmrozanec cron-utils com.cronutils:cron-utils Maven
  • Critical 9.0
    CVE-2021-43616 Public exploit

    The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in pac…

    npm npm npm Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2021-3064 Public exploit EPSS 20%

    PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

    A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The atta…

    Palo Alto Networks PAN-OS Prisma Access Network devices
  • Critical 9.8
    CVE-2021-42237 Exploited · Ransomware Public exploit EPSS 98%

    Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where i…

    KEV Mar 25, 2022
  • Critical 10.0
    CVE-2021-40113 Public exploit

    Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a d…

    Cisco Cisco Catalyst PON Series Network devices