Skip to content
OpenAdvisories

Archive

14 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /14 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical —
    GHSA-94g7-hpv8-h9qm

    Remote code injection in Log4j

    ### Impact Logging untrusted or user controlled data with a vulnerable version of Log4J may result in Remote Code Execution (RCE) against your application. This includes untrusted data included in logged errors such as exception traces, authentication failure…

    com.splunk.logging:splunk-library-javalogging Maven
  • Critical —
    GHSA-mf4f-j588-5xm8

    Apache Log4j Remote Code Execution

    ### Impact Opencast uses an Apache Log4j2 version which, combined with older JDK versions, can be used for remote code execution attacks which have been found to be actively exploited. Apache Log4j2 <=2.14.1 JNDI features is not sufficiently protected. An att…

    org.opencastproject:opencast-common Maven
  • Critical 9.9
    CVE-2021-43821 Public exploit

    Files Accessible to External Parties in Opencast

    Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast before version 9.10 or 10.6 allows references to local file URLs in ingested media packages, allowing attackers to include local files from Opencast's host machines and maki…

    opencast opencast org.opencastproject:opencast-ingest-service-impl Maven
  • Critical 9.0
    CVE-2021-45046 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-defaul…

    Apache Software Foundation Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV May 1, 2023
  • Critical 9.8
    CVE-2021-4073 Scanner template

    RegistrationMagic <= 5.0.1.7 Authentication Bypass

    The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_usin…

    RegistrationMagic RegistrationMagic Web / CMS
  • Critical 9.8
    CVE-2021-3836

    Improper Restriction of XML External Entity Reference in dbeaver/dbeaver

    dbeaver is vulnerable to Improper Restriction of XML External Entity Reference

    DBeaver dbeaver/dbeaver