Skip to content
OpenAdvisories

Archive

16 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /16 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.1
    CVE-2020-35214

    An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.

    An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.

    io.atomix:atomix Maven
  • High 8.1
    CVE-2020-35213

    An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

    An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

    io.atomix:atomix Maven
  • High 7.5
    CVE-2020-35211

    An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

    An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

    io.atomix:atomix Maven
  • High 7.5
    CVE-2020-35209

    An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

    An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

    io.atomix:atomix Maven
  • High 8.4
    CVE-2021-43837

    Template injection in vault-cli

    vault-cli is a configurable command-line interface tool (and python library) to interact with Hashicorp Vault. In versions before 3.0.0 vault-cli features the ability for rendering templated values. When a secret starts with the prefix `!template!`, vault-cli…

    peopledoc vault-cli vault-cli PyPI
  • High 8.2
    CVE-2021-41028

    A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6…

    Fortinet Fortinet FortiClientEMS, FortiClientWindows, FortiClientLinux, FortiClientMac Network devices
  • High 8.1
    CVE-2021-41261

    Stored Cross-site Scripting in Galette

    Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to stored cross site scripting attacks via the preferences footer. The preference footer can only be altered by…

    galette galette galette Ubuntu
  • High 8.8
    CVE-2021-41262

    SQL Injection in Galette

    Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to SQL injection attacks by users with "member" privilege. Users are advised to upgrade to version 0.9.6 as soo…

    galette galette galette Ubuntu
  • High 8.2
    CVE-2021-41260

    Missing CSRF checks in Galette

    Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 do not check for Cross Site Request Forgery attacks. All users are advised to upgrade to 0.9.6 as soon as possible. There a…

    galette galette galette Ubuntu
  • High 7.1
    CVE-2021-3960

    Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects Bitdefender GravityZ…

    Bitdefender GravityZone
  • High 8.1
    CVE-2021-4124

    Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

    janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    meetecho meetecho/janus-gateway janus janus Debian Ubuntu