CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- aaptjs project aaptjs Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters 9.8 Critical
- aaptjs project aaptjs Vulnerability in remove function leads to arbitrary code execution via filePath parameters 9.8 Critical
- aaptjs project aaptjs Vulnerability in crunch function leads to arbitrary code execution via filePath parameters 9.8 Critical
- aaptjs project aaptjs Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters 9.8 Critical
- aaptjs project aaptjs Vulnerability in dump function leads to arbitrary code execution via filePath parameters 9.8 Critical
- aaptjs project aaptjs Vulnerability in list function leads to arbitrary code execution via filePath parameters 9.8 Critical
- aaptjs project aaptjs An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to... 9.8 Critical
- easyxml project easyxml XML External Entity vulnerability in Easy-XML 9.1 Critical
- d-link dir-868lw firmware Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access,... 5.3 Medium
- getsymphony symphony A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement... 9.1 Critical
- modx revolution XML External Entity vulnerability in MODX CMS 9.1 Critical
-
wireguard-toolsopenSUSE Security update for wireguard-tools No score -
flatbufferscrates.io Generated code can read and write out of bounds in safe code 9.8 Critical - sophos secure workspace for android, secure workspace +1 more A local attacker could bypass the app password using a race condition in Sophos Secure Workspace... 5.9 Medium
-
libjxlOSS-Fuzz Heap-buffer-overflow in WriteRingBuffer No score -
clamavOSS-Fuzz Heap-buffer-overflow in handle_gets No score -
clamavOSS-Fuzz Heap-buffer-overflow in handle_gets No score - ranko rkcms A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend... 5.5 Medium
- nvidia virtual gpu, virtual gpu software +1 more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it... 5.5 Medium
- nvidia virtual gpu, virtual gpu software +1 more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it... 5.5 Medium
- nvidia virtual gpu, virtual gpu software +1 more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel driver, where a... 5.5 Medium
- nvidia virtual gpu, virtual gpu software +1 more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a... 7.0 High
- nvidia virtual gpu, virtual gpu software +1 more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it... 7.1 High
- nvidia virtual gpu, virtual gpu software +1 more NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where... 7.8 High
- baijiacms project baijiacms A directory traversal vulnerability in the component system/manager/class/web/database.php was... 6.5 Medium
- frogcms project frogcms A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which... 4.9 Medium
- dspace Communities and collections administrators can escalate their privilege up to system administrator 7.2 High
- yonyou turbocrm SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter... 7.5 High
- janobe online reviewer system Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by... 9.8 Critical
- oretnom23 budget and expense tracker system Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker... 8.8 High
- oretnom23 online food ordering system Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0... 9.8 Critical
- church management system project management system Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0... 9.8 Critical
- hoene hoene/libmysofa, symonics libmysofa, fedoraproject fedora +2 more Heap-based Buffer Overflow in hoene/libmysofa 6.2 Medium
- pharmacy point of sale system project point of sale system An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the... 9.8 Critical
- e-negosyo system project system A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in ... 7.2 High
- e-negosyo system project system An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email... 9.8 Critical
- opensc, fedoraproject fedora +1 more Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that... 5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 more Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that... 5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 more A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that... 5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 more A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. 5.3 Medium
- fluent fluentd ReDoS vulnerability in parser_apache2 5.9 Medium
- solarwinds kiwi syslog server Clickjacking Vulnerability 5.0 Medium
- dhis2 dhis 2, dhis2-core +1 more SQL Injection in DHIS2 Tracker API 8.8 High
- hp officejet 7110 firmware A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format... 4.8 Medium
- hp futuresmart 4, futuresmart 5 +1 more Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting... 5.4 Medium
- vmware installbuilder Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg... 7.8 High
- vmware installbuilder On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then... 8.8 High
- sysaid SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication. 6.1 Medium
- tendacn ac9 firmware Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03... 8.8 High
- tendacn ac9 firmware Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03... 8.8 High
- Show olderLoading…