Skip to content
OpenAdvisories

Archive

14 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /14 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.9
    CVE-2021-43821 Public exploit

    Files Accessible to External Parties in Opencast

    Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast before version 9.10 or 10.6 allows references to local file URLs in ingested media packages, allowing attackers to include local files from Opencast's host machines and maki…

    opencast opencast org.opencastproject:opencast-ingest-service-impl Maven
  • High 7.5
    CVE-2021-4044 Public exploit EPSS 50%

    Invalid handling of X509_verify_cert() internal errors in libssl

    Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is …

    OpenSSL OpenSSL openssl openssl Ubuntu Alpine crates.io
  • Critical 9.0
    CVE-2021-45046 Exploited · Ransomware Public exploit EPSS 100%

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-defaul…

    Apache Software Foundation Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV May 1, 2023
  • High 7.5
    CVE-2021-39312 Public exploit EPSS 78%

    True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

    The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file.

    True Ranker True Ranker
  • Unscored —
    CVE-2021-42063 Public exploit EPSS 23%

    A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usag…

    SAP_SE SAP Knowledge Warehouse
  • High 7.1
    CVE-2021-3831 Public exploit

    Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5

    gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Gnuboard gnuboard/gnuboard5
  • High 7.5
    CVE-2021-4104 Public exploit EPSS 81%

    Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

    JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to pe…

    Apache Software Foundation Apache Log4j 1.x apache-log4j1.2 apache-log4j1.2 Debian Ubuntu Maven
  • Unscored —
    CVE-2021-42023 Public exploit

    A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA wh…

    Siemens Questa Simulation ModelSim Simulation ICS / OT