Skip to content
OpenAdvisories

Archive

7 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /7 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

135 results · Feed

  • Unscored —
    CVE-2021-22955

    A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when con…

  • Unscored —
    CVE-2021-44527

    A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gai…

  • Unscored —
    CVE-2021-40096

    A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote …

  • Unscored —
    CVE-2021-40095

    An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was suscepti…

  • Unscored —
    CVE-2021-40094

    A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may …

  • Unscored —
    CVE-2021-40093

    A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote …

  • Unscored —
    CVE-2021-40092

    A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to in…

  • Medium 6.1
    CVE-2021-29116

    BUG-000142180 Hosted feature services vulnerable to stored XSS

    A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed …

    Esri ArcGIS Server
  • Medium 5.3
    CVE-2021-29115

    An information disclosure vulnerability

    An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose feat…

    Esri ArcGIS Server
  • High 7.3
    CVE-2021-29114

    SQL injection vulnerability in ArcGIS Server

    A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries.

    Esri ArcGIS Server
  • Medium 4.7
    CVE-2021-29113

    Remote file inclusion vulnerability in ArcGIS Server help documentation

    A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page.

    Esri ArcGIS Server
  • Medium 4.3
    CVE-2021-4049

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

    LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  • Unscored —
    CVE-2021-44513

    Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrit…

    tmate-ssh-server tmate-ssh-server Debian Ubuntu
  • Unscored —
    CVE-2021-44512

    World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to com…

    tmate-ssh-server tmate-ssh-server Debian Ubuntu
  • Unscored —
    CVE-2021-28703

    grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain …

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine