Skip to content
OpenAdvisories

Archive

10 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /10 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.1
    CVE-2021-41242

    Path Traversal in some REST methods leading to file upload to arbitrary places

    OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create dire…

    OpenOLAT OpenOLAT
  • High 8.1
    CVE-2021-23463

    XML External Entity (XXE) Injection

    The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If it execu…

    com.h2database:h2 Maven
  • High 7.4
    CVE-2021-38917

    IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read an…

    IBM PowerVM Hypervisor
  • High 7.3
    CVE-2021-3829

    Open Redirect in openwhyd/openwhyd

    openwhyd is vulnerable to URL Redirection to Untrusted Site

    openwhyd openwhyd/openwhyd
  • High 7.4
    CVE-2021-4084

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    pimcore pimcore/pimcore pimcore/pimcore Packagist