Skip to content
OpenAdvisories

Archive

7 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /7 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-43808

    Blade `@parent` Exploitation Leading To Possible XSS in Laravel

    Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another locati…

    laravel framework laravel/framework php-laravel-framework Debian Packagist
  • Medium —
    CVE-2021-42567

    Cross-site Scripting in Apereo CAS

    Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

    org.apereo.cas:cas-server-core-web Maven
  • Medium 6.1
    CVE-2021-29116

    BUG-000142180 Hosted feature services vulnerable to stored XSS

    A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed …

    Esri ArcGIS Server
  • Medium 5.3
    CVE-2021-29115

    An information disclosure vulnerability

    An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose feat…

    Esri ArcGIS Server
  • Medium 4.7
    CVE-2021-29113

    Remote file inclusion vulnerability in ArcGIS Server help documentation

    A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page.

    Esri ArcGIS Server
  • Medium 4.3
    CVE-2021-4049

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

    LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist