Skip to content
OpenAdvisories

Archive

3 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /3 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.2
    CVE-2021-23562

    Arbitrary File Upload

    This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.

    plupload plupload.js Ubuntu npm
  • Medium 5.4
    CVE-2021-38909

    IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

    IBM Cognos Analytics
  • Medium 5.4
    CVE-2021-29867

    IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2021-29756

    IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which co…

    IBM Cognos Analytics
  • Medium 5.3
    CVE-2021-29719

    IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifyi…

    IBM Cognos Analytics
  • Medium 6.1
    CVE-2021-20493

    IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

    IBM Cognos Analytics
  • Medium 5.9
    CVE-2021-20470

    IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes…

    IBM Cognos Analytics
  • Medium 5.3
    CVE-2021-3980

    Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

    elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

    Elgg elgg/elgg elgg/elgg Packagist
  • Medium 6.8
    CVE-2021-43991

    Persistent XSS via Avatar Upload in Kentico Xperience CMS

    The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied …

    Kentico Kentico Xperience XMS
  • Medium 6.5
    CVE-2021-4000

    Open Redirect in star7th/showdoc

    showdoc is vulnerable to URL Redirection to Untrusted Site

    star7th star7th/showdoc showdoc/showdoc Packagist