Skip to content
OpenAdvisories

Archive

6 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /6 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2021-43800

    Asset directory traversal with some storage modules on Windows

    Wiki.js is a wiki app built on Node.js. Prior to version 2.5.254, directory traversal outside of Wiki.js context is possible when a storage module with local asset cache fetching is enabled on a Windows host. A malicious user can potentially read any file on …

    requarks wiki
  • High 8.3
    CVE-2021-36198

    Entrapass

    Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.

    Johnson Controls Entrapass
  • High 8.3
    CVE-2021-35242

    A valid CSRF token is present in response to an invalid request

    Serv-U server responds with valid CSRFToken when the request contains only Session.

    SolarWinds Serv-U Server
  • High 8.4
    CVE-2021-35245

    Broken Access Control Vulnerability for SolarWinds Serv-U

    When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

    SolarWinds Serv-U FTP
  • High 7.3
    CVE-2021-4069

    Use After Free in vim/vim

    vim is vulnerable to Use After Free

    vim vim/vim vim vim Debian Ubuntu Alpine