Skip to content
OpenAdvisories

Archive

21 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /21 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2021-43851

    SQL injection vulnerability in anuko timetracker

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time Tracker version 1.19.33.5606 and prior due to not properly checking of the "group" and "status" parameters in…

    anuko timetracker
  • High 7.3
    CVE-2021-27451

    Mesa Labs AmegaView improper authentication

    Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device.

    Mesa Labs AmegaView
  • High 7.3
    CVE-2021-27453

    Mesa Labs AmegaView authentication bypass

    Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.

    Mesa Labs AmegaView
  • High 7.8
    CVE-2021-27445

    Mesa Labs AmegaView Improper Privilege Management

    Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device.

    Mesa Labs AmegaView
  • High 8.1
    CVE-2021-44207 Exploited EPSS 17%

    Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

    KEV Dec 23, 2024
  • High 8.2
    CVE-2021-43587

    Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A loca…

    Dell PowerPath Management Appliance
  • High 7.5
    CVE-2021-43839

    Drainage of FeeCollector's Block Transaction Fees

    Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has bee…

    crypto-org-chain cronos github.com/crypto-org-chain/cronos github.com/tharsis/evmos Go