Skip to content
OpenAdvisories

Archive

22 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /22 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.0
    CVE-2021-21909

    Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. …

  • Medium 6.0
    CVE-2021-21908

    Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attem…

  • Medium 6.5
    CVE-2021-31558 EPSS 11%

    Delta Electronics DIAEnergie (Update A)

    DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.

    Delta Electronics DIAEnergie ICS / OT
  • Medium 4.9
    CVE-2021-21907

    A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC M…

  • Medium 6.5
    CVE-2021-36886

    WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).

    CipherCoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Web / CMS
  • Medium 4.9
    CVE-2021-21896

    A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050…

  • Medium 6.1
    CVE-2021-36885

    WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

    Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).

    CipherCoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2021-21886

    A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 …

  • Medium 4.9
    CVE-2021-21878

    A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix Pre…

  • Medium 4.3
    CVE-2021-39013

    IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive i…

    IBM Cloud Pak for Security
  • Medium 4.6
    CVE-2021-40836

    Denial-of-Service (DoS) Vulnerability

    A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the an…

    F-Secure F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Internet Gatekeeper & F-Secure Atlant Linux Windows