Skip to content
OpenAdvisories

Archive

10 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /10 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • High 8.1
    CVE-2021-41242

    Path Traversal in some REST methods leading to file upload to arbitrary places

    OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create dire…

    OpenOLAT OpenOLAT
  • Unscored —
    CVE-2020-12890

    Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker wit…

    AMD AMD Processors
  • Unscored —
    CVE-2021-26340

    A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to f…

    AMD AMD EPYC™
  • Medium 4.3
    CVE-2021-43815

    Grafana directory traversal for `.cvs` files

    Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source e…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Alpine Go
  • Critical —
    GHSA-xxfh-x98p-j8fr

    Remote code injection in Log4j (through pax-logging-log4j2)

    ### Impact Remote Code Execution. ### Patches Users of pax-logging 1.11.9 should update to 1.11.10. Users of pax-logging 2.0.10 should update to 2.0.11. ### Workarounds Set system property `-Dlog4j2.formatMsgNoLookups=true` ### References https://github.com/a…

    org.ops4j.pax.logging:pax-logging-log4j2 Maven
  • Medium 6.5
    CVE-2021-23663

    Prototype Pollution

    All versions of package sey are vulnerable to Prototype Pollution via the deepmerge() function.

    sey npm
  • Medium 6.5
    CVE-2021-23700

    Prototype Pollution

    All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.

    merge-deep2 npm
  • Critical 9.8
    CVE-2021-23639 Public exploit

    Remote Code Execution (RCE)

    The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

    md-to-pdf npm
  • Medium 6.5
    CVE-2021-23561

    Prototype Pollution

    All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.

    comb npm
  • High 8.1
    CVE-2021-23463

    XML External Entity (XXE) Injection

    The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If it execu…

    com.h2database:h2 Maven
  • Medium 4.3
    CVE-2021-4089

    Improper Access Control in snipe/snipe-it

    snipe-it is vulnerable to Improper Access Control

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Unscored —
    CVE-2021-27984

    In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files.

  • Unscored —
    CVE-2021-27983

    Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.

  • Unscored —
    CVE-2021-31747

    Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in update_applet.php, which could lead to man-in-the-mi…

  • Medium 6.3
    CVE-2021-38937

    IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a …

    IBM PowerVM Hypervisor
  • High 7.4
    CVE-2021-38917

    IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read an…

    IBM PowerVM Hypervisor
  • Unscored —
    CVE-2021-31746

    Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in…

  • Unscored —
    CVE-2021-31745

    Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access…

  • Medium 4.3
    CVE-2021-43813 EPSS 57%

    Directory Traversal in Grafana

    Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. The vulnerability is limited in scope, and only allo…

    Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine
  • Medium 4.8
    CVE-2021-36911

    WordPress Comment Engine Pro plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability

    Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Comment Engine Pro plugin (versions <= 1.0), could be exploited by users with Editor or higher role.

    @rex1989 Comment Engine Pro (WordPress plugin) Web / CMS
  • Unscored —
    CVE-2021-29214

    A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administ…

  • Unscored —
    CVE-2021-37934

    Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterpri…

  • Unscored —
    CVE-2021-37935

    An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthent…

  • High 7.3
    CVE-2021-3829

    Open Redirect in openwhyd/openwhyd

    openwhyd is vulnerable to URL Redirection to Untrusted Site

    openwhyd openwhyd/openwhyd
  • Medium 4.3
    CVE-2021-40834

    User interface Spoofing in F-Secure SAFE browser for Android

    A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to…

    F-Secure F-Secure Mobile Security
  • Unscored —
    CVE-2021-37189

    An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for se…

  • Unscored —
    CVE-2021-37188

    An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized fir…

  • Unscored —
    CVE-2021-37187

    An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password fil…

  • Unscored —
    CVE-2021-35978

    An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command ex…

  • High 7.4
    CVE-2021-4084

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 5.5
    CVE-2021-4081

    Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

    pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 4.3
    CVE-2021-4082

    Cross-Site Request Forgery (CSRF) in pimcore/pimcore

    pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Critical 10.0
    CVE-2021-44228 Exploited · Ransomware Public exploit EPSS 100%

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

    Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV Dec 10, 2021