Skip to content
OpenAdvisories

Archive

27 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /27 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2021-43858 Public exploit EPSS 35%

    User privilege escalation in MinIO

    MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `REL…

    minio minio
  • High 8.1
    CVE-2021-33017

    Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel

    The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.

    Philips IntelliBridge EC 80 Hub IntelliBridge EC 40 Hub
  • High 8.1
    CVE-2021-32993

    Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials

    IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

    Philips IntelliBridge EC 40 Hub IntelliBridge EC 80 Hub
  • High 8.2
    CVE-2021-43855

    Stored XSS via SVG in Requarks/wiki

    Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through a SVG file upload made via a custom request with a fake MIME type. By creating a crafted SVG file, a malicious Wiki.js user may stage a st…

    requarks wiki
  • High 8.2
    CVE-2021-43856

    Stored XSS in non-image uploads in Requarks/wiki

    Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through non-image file uploads for file types that can be viewed directly inline in the browser. By creating a malicious file which can execute in…

    requarks wiki
  • High 8.2
    CVE-2021-43845

    Prevent out-of-bounds read in PJSIP

    PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. Thi…

    pjsip pjproject asterisk asterisk Debian Ubuntu Alpine