Skip to content
OpenAdvisories

Archive

6 December 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2021-43936 Public exploit EPSS 36%

    Distributed Data Systems WebHM

    The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

  • Unscored —
    CVE-2021-24931 Public exploit EPSS 79%

    Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

    The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL sta…

  • Unscored —
    CVE-2021-24917 Public exploit EPSS 72%

    WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

    The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.

  • Unscored —
    CVE-2021-43471 Public exploit

    In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can re…

  • Unscored —
    CVE-2021-43469 Public exploit

    VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.