November 2021

7 results · Clear filters · Feed

• Medium 5.3
  CVE-2021-21707 Public exploit EPSS 25%

  Special characters break path parsing in XML functions

  In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function …

  PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  Nov 29, 2021
• Medium 6.5
  CVE-2021-43408 Public exploit

  Duplicate Post WordPress Plugin SQL Injection Vulnerability

  The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read,…

  Copy Delete Posts Duplicate Post WordPress Plugin Web / CMS
  Nov 19, 2021
• Medium 5.4
  CVE-2021-41278 Public exploit

  Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors

  Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX …

  edgexfoundry app-functions-sdk-go github.com/edgexfoundry/app-functions-sdk-go github.com/edgexfoundry/app-functions-sdk-go/v2 Go
  Nov 18, 2021
• Medium 5.7
  CVE-2021-3572 Public exploit

  Improper Input Validation in pip

  A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

  python-pip pip python-pip Debian Ubuntu PyPI
  Nov 10, 2021
• Medium 4.3
  CVE-2021-41351 Public exploit

  Microsoft Edge (Chrome based) Spoofing on IE Mode

  Microsoft Edge (Chrome based) Spoofing on IE Mode

  Microsoft Microsoft Edge (Chromium-based) in IE Mode Browsers
  Nov 10, 2021
• Medium 6.5
  CVE-2021-41349 Public exploit EPSS 93%

  Microsoft Exchange Server Spoofing Vulnerability

  Microsoft Exchange Server Spoofing Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22
  Nov 10, 2021
• Medium 5.3
  CVE-2021-31602 Public exploit EPSS 52%

  An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. Th…

  Nov 8, 2021