Skip to content
OpenAdvisories

Archive

7 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /7 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.3
    CVE-2021-44420

    Potential bypass of an upstream access control based on URL paths in Django

    In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • High 8.8
    CVE-2021-43810 Scanner template

    Cross-site Scripting (XSS) when redirect an url

    Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly va…

    Admidio admidio
  • High 8.1
    CVE-2021-28680

    Improper Privilege Management in devise_masquerade

    The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situation where Devise (wi…

    devise_masquerade RubyGems
  • High 7.5
    CVE-2021-43798 Exploited Public exploit Scanner template EPSS 89%

    Grafana path traversal

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

    Grafana Grafana github.com/grafana/grafana grafana Web / CMS Alpine Go
    KEV Oct 9, 2025
  • High 7.5
    CVE-2021-43805

    ReDos vulnerability on guest checkout email validation

    Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest or…

    solidusio solidus solidus_core RubyGems
  • High 7.5
    CVE-2021-43789 Public exploit

    Blind SQLi using Search filters in PrestaShop

    PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • High 7.3
    CVE-2021-29114

    SQL injection vulnerability in ArcGIS Server

    A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries.

    Esri ArcGIS Server