Skip to content
OpenAdvisories

Archive

8 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /8 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.8
    CVE-2021-43811 Public exploit

    Code injection via unsafe YAML loading

    Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary c…

    awslabs sockeye sockeye PyPI
  • Unscored —
    CVE-2021-43530 Public exploit

    A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a…

    Mozilla Firefox Browsers
  • Unscored —
    CVE-2021-42835 Public exploit

    An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint …

  • High 8.8
    CVE-2021-20039 Public exploit EPSS 79%

    Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method all…

    SonicWall SonicWall SMA100 Network devices
  • Critical 9.8
    CVE-2021-20038 Exploited · Ransomware Public exploit EPSS 100%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

    SonicWall SonicWall SMA100 Network devices
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2021-44529 Exploited · Ransomware Public exploit EPSS 99%

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execu…

    KEV Mar 25, 2024