Skip to content
OpenAdvisories

Archive

27 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /27 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-45895

    Cross-site Scripting in Netgen Tags Bundle

    Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface.

    netgen/tagsbundle Packagist
  • Medium 5.9
    CVE-2021-43550

    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm

    The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series …

    Philips Patient Information Center iX (PIC iX) Efficia CM Series
  • Medium 6.1
    CVE-2021-43552

    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key

    The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.

    Philips Patient Information Center iX (PIC iX)
  • Medium 6.5
    CVE-2021-43548

    Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation

    Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

    Philips Patient Information Center iX (PIC iX)
  • Medium 6.8
    CVE-2021-35232

    Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries

    Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to s…

    SolarWinds Web Help Desk
  • Medium 6.1
    CVE-2021-38961

    IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …

    IBM OPENBMC
  • Medium 6.8
    CVE-2021-4173

    Use After Free in vim/vim

    vim is vulnerable to Use After Free

    vim vim/vim vim vim Debian Alpine