Skip to content
OpenAdvisories

Archive

10 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /10 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-43815

    Grafana directory traversal for `.cvs` files

    Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source e…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Alpine Go
  • Medium 6.5
    CVE-2021-23663

    Prototype Pollution

    All versions of package sey are vulnerable to Prototype Pollution via the deepmerge() function.

    sey npm
  • Medium 6.5
    CVE-2021-23700

    Prototype Pollution

    All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.

    merge-deep2 npm
  • Medium 6.5
    CVE-2021-23561

    Prototype Pollution

    All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.

    comb npm
  • Medium 4.3
    CVE-2021-4089

    Improper Access Control in snipe/snipe-it

    snipe-it is vulnerable to Improper Access Control

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Medium 6.3
    CVE-2021-38937

    IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a …

    IBM PowerVM Hypervisor
  • Medium 4.3
    CVE-2021-43813 EPSS 57%

    Directory Traversal in Grafana

    Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. The vulnerability is limited in scope, and only allo…

    Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine
  • Medium 4.8
    CVE-2021-36911

    WordPress Comment Engine Pro plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability

    Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Comment Engine Pro plugin (versions <= 1.0), could be exploited by users with Editor or higher role.

    @rex1989 Comment Engine Pro (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2021-40834

    User interface Spoofing in F-Secure SAFE browser for Android

    A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to…

    F-Secure F-Secure Mobile Security
  • Medium 5.5
    CVE-2021-4081

    Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

    pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 4.3
    CVE-2021-4082

    Cross-Site Request Forgery (CSRF) in pimcore/pimcore

    pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

    pimcore pimcore/pimcore pimcore/pimcore Packagist