Skip to content
OpenAdvisories

Archive

9 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /9 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2021-43802

    Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports

    Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, might allow the attacker to gain admin privileges for the Etherpad instance. This, in turn, can be used to install a mal…

    ether etherpad-lite
  • Critical 9.8
    CVE-2021-43608

    DBAL 3 SQL Injection Security Vulnerability

    Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input t…

    doctrine/dbal php-doctrine-dbal Ubuntu Packagist
  • Critical 9.9
    CVE-2021-21954

    A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of A…

  • Critical 9.8
    CVE-2021-3817 Public exploit EPSS 38%

    SQL Injection in wbce/wbce_cms

    wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

    WBCE wbce/wbce_cms