Skip to content
OpenAdvisories

Archive

15 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /15 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

255 results · Feed

  • Unscored —
    CVE-2021-40170

    An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A3…

  • Unscored —
    CVE-2021-40171

    The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPG…

  • Unscored —
    CVE-2021-40826

    Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsi…

    clementine clementine Debian Ubuntu
  • Unscored —
    CVE-2021-40827

    Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block…

    clementine clementine Debian Ubuntu
  • Unscored —
    CVE-2021-41560 Public exploit EPSS 11%

    OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUt…

  • Medium 5.4
    CVE-2021-42220

    Dolibarr Cross Site Scripting (XSS) vulnerability

    A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2021-42945

    A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php.

  • Unscored —
    CVE-2021-43326 Public exploit

    Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.

  • Unscored —
    CVE-2021-43325

    Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a…

  • Unscored —
    CVE-2021-41557

    Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a us…

  • Unscored —
    CVE-2021-41844

    Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.

  • Unscored —
    CVE-2021-41871

    An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes…

  • Unscored —
    CVE-2021-41870

    An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can …

  • Critical 9.1
    CVE-2021-4110

    NULL Pointer Dereference in mruby/mruby

    mruby is vulnerable to NULL Pointer Dereference

    mruby mruby/mruby mruby mruby Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2021-43113

    Command injection in itext7-core

    iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

    com.itextpdf:itext7-core libitext5-java libitext5-java com.itextpdf:itextpdf Debian Ubuntu Maven