Ghost CMS <=4.32 - Cross-Site Scripting

Ghost CMS 4.0.0 to 4.3.2 contains a DOM cross-site scripting vulnerability. An unused endpoint added during the development of 4.0.0 allows attackers to gain access by getting logged-in users to click a link containing malicious code. id: CVE-2021-29484 info: name: Ghost CMS =4.32 - Cross-Site...

CVE-2021-24220

creationtimestamp| type| source ---|---|--- 2025-10-22 18:12:25+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24220.yaml 2025-10-23 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25a5lh23...

Linux Distros Unpatched Vulnerability : CVE-2021-3283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10...

Linux Distros Unpatched Vulnerability : CVE-2021-47155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which in some situations allows attackers ...

Linux Distros Unpatched Vulnerability : CVE-2021-47518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback nfcgenldumpsesdone should check if received argument is non-NULL, because...

📄 Microsoft Excel LTSC Professional Pilus 2021 Remote Code Execution

Microsoft Excel LTSC Professional Pilus 2021 and Microsoft Word LTSC MSO suffer from a vulnerability. The attacker can trick any user into opening and executing their code by sending a malicious DOCM file via email or a streaming server. Titles: Microsoft Excel LTSC Professional Pilus 2021 -...

CVE-2021-47589

In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in igbvfprobe In igbvfprobe, if registernetdev fails, the program will go to label errhwinit, and then to label errioremap. In freenetdev which is just below label errioremap, there is listforeachentrysafe...

CVE-2021-47034

creationtimestamp| type| source ---|---|--- 2024-02-28 10:26:41+00:00| seen| https://t.me/ctinow/195272 2024-02-28 10:32:07+00:00| seen| https://t.me/ctinow/195288...

CVE-2021-42141

creationtimestamp| type| source ---|---|--- 2024-01-23 00:26:35+00:00| seen| https://t.me/ctinow/171568 2024-02-16 14:21:53+00:00| seen| https://t.me/ctinow/186397...

SUSE CVE-2021-2305

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

BELL-CVE-2021-22931 CVE-2021-22931 does not affect BellSoft software

Bulletin has no description...

CVE-2021-46878

creationtimestamp| type| source ---|---|--- 2023-04-11 22:28:44+00:00| seen| https://t.me/cibsecurity/61915...

SUSE CVE-2021-30567

Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture...

CVE-2021-24911

creationtimestamp| type| source ---|---|--- 2022-08-22 18:20:33+00:00| seen| https://t.me/cibsecurity/48479...

CVE-2021-40511

creationtimestamp| type| source ---|---|--- 2022-06-21 20:27:42+00:00| seen| https://t.me/cibsecurity/44914...

CVE-2021-39746

creationtimestamp| type| source ---|---|--- 2022-03-30 20:12:41+00:00| seen| https://t.me/cibsecurity/39840...

CVE-2021-43097

creationtimestamp| type| source ---|---|--- 2022-03-29 02:40:52+00:00| seen| https://t.me/cibsecurity/39703...

CVE-2021-39712

creationtimestamp| type| source ---|---|--- 2022-03-16 17:20:35+00:00| seen| https://t.me/cibsecurity/39032...

CVE-2021-27011

...

CVE-2021-46603

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...