Skip to content
OpenAdvisories

Archive

9 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /9 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2021-43803 EPSS 47%

    Unexpected server crash in Next.js

    Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js abov…

    vercel next.js next npm
  • High 7.8
    CVE-2021-43982

    Delta Electronics CNCSoft

    Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.

    Delta Electronics CNCSoft ICS / OT
  • High 8.8
    CVE-2021-22568

    Dart - Publishing to third-party package repositories may expose pub.dev credentials

    When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate…

    Google Dart SDK
  • High 7.5
    CVE-2021-38951

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a speci…

    IBM WebSphere Application Server
  • High 8.7
    CVE-2021-29678

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user wi…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 8.1
    CVE-2021-41265

    Improper Authentication in Flask-AppBuilder

    Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The issue allows for a malicious actor with a carefully crafted request to successfully authenticate an…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI
  • High 7.7
    CVE-2021-21955

    An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binar…

  • High 8.8
    CVE-2021-43071

    A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and …

    Fortinet Fortinet FortiWeb Network devices
  • High 7.8
    CVE-2021-43065

    A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, ve…

    Fortinet Fortinet FortiNAC Network devices
  • High 8.8
    CVE-2021-36194

    Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may all…

    Fortinet Fortinet FortiWeb Network devices