Skip to content
OpenAdvisories

Archive

27 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /27 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2021-43858 Public exploit EPSS 35%

    User privilege escalation in MinIO

    MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `REL…

    minio minio
  • Critical 9.8
    CVE-2021-43857 Public exploit EPSS 56%

    Gerapy may contain remote code execution vulnerability

    Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.

    Gerapy Gerapy gerapy PyPI
  • Unscored —
    CVE-2021-45232 Public exploit EPSS 86%

    security vulnerability on unauthorized access.

    In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the …

    Apache Software Foundation Apache APISIX Dashboard