Skip to content
OpenAdvisories

Archive

23 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /23 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-4024

    Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman

    A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the hos…

    podman github.com/containers/podman/v3 github.com/containers/podman github.com/containers/podman/v2 Debian Ubuntu Alpine Go
  • Medium 5.3
    CVE-2021-35243

    HTTP PUT & DELETE Methods Enabled

    The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. Whi…

    SolarWinds Web Help Desk
  • Medium 6.2
    CVE-2021-43849

    DoS vulnerability

    cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both Android 6+ and iOS. In versions prior to 5.0.1 The exported activity `de.niklasmerz.cordova.biometric.BiometricActivity` can cause the app…

    NiklasMerz cordova-plugin-fingerprint-aio cordova-plugin-fingerprint-aio npm