Skip to content
OpenAdvisories

Archive

7 December 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2021-42717 Public exploit

    ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-tho…

  • Unscored —
    CVE-2021-38759 Public exploit EPSS 16%

    Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain …

  • Unscored —
    CVE-2021-40859 Public exploit EPSS 72%

    Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web…

  • High 7.5
    CVE-2021-43798 Exploited Public exploit EPSS 89%

    Grafana path traversal

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

    KEV Oct 9, 2025
  • High 7.5
    CVE-2021-43789 Public exploit

    Blind SQLi using Search filters in PrestaShop

    PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.