Skip to content
OpenAdvisories

Archive

November 2021

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-44077 Exploited Public exploit Scanner template EPSS 94%

    Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014…

    KEV Dec 1, 2021
  • Critical 9.8
    CVE-2021-44026 Exploited Public exploit EPSS 70%

    Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

    KEV Jun 22, 2023
  • Critical 10.0
    CVE-2021-41277 Exploited Public exploit Scanner template EPSS 97%

    GeoJSON URL validation can expose server files and environment variables to unauthorized users

    Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment varia…

    KEV Nov 12, 2024
  • Critical 9.8
    CVE-2021-42237 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where i…

    KEV Mar 25, 2022