Skip to content
OpenAdvisories

Archive

29 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /29 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2021-43876

    Microsoft SharePoint Elevation of Privilege Vulnerability

    Microsoft SharePoint Elevation of Privilege Vulnerability

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1
  • High 7.5
    CVE-2021-23727

    Stored Command Injection

    This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manip…

    celery celery celery Debian Ubuntu PyPI
  • High 7.1
    CVE-2021-36722

    Emuse - eServices / eNvoice SQL injection

    Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive …

    Emuse eServices / eNvoice
  • High 7.1
    CVE-2021-38688

    Improper Authentication in Qfile

    An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfi…

    QNAP Systems Qfile
  • High 8.1
    CVE-2021-38687

    Stack Overflow Vulnerability in Surveillance Station

    A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveil…

    QNAP Systems Surveillance Station
  • High 7.4
    CVE-2021-35034

    An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote …

    Zyxel NBG6604 series firmware Network devices
  • High 8.8
    CVE-2021-44161

    Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection

    Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication.

    Changing MOTP(Mobile One Time Password)
  • High 7.3
    CVE-2021-44160

    Carinal Tien Hospital Health Report System - Authorization Bypass Through User-Controlled Key

    Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire another general user’s privilege by modifying the cookie parameter without authentication. The attacker can then perform limited operations on t…

    Carinal Tien Hospital Health Report System