CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- concrete5-legacy project concrete5-legacyCross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5...6.1 Medium
- concrete5-legacy project concrete5-legacyCross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapCross-site scripting (XSS) vulnerability in application/modules/admin/views/ecommerce/products...6.1 Medium
- spotweb project spotwebCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1...6.1 Medium
- spotweb project spotwebCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1...6.1 Medium
- spotweb project spotwebCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1...6.1 Medium
- spotweb project spotwebCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1...6.1 Medium
- spotweb project spotwebCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1...6.1 Medium
- spotweb project spotwebCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1...6.1 Medium
- glimmrtv flextvCross-site scripting (XSS) vulnerability in index.php in FlexTV beta development version allows...6.1 Medium
- alfred-spotify-mini-player alfred spotify mini playerCross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below...6.1 Medium
- getid3Cross-site scripting in demos/demo.mysqli.php in getID36.1 Medium
- faveohelpdesk faveoCross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0...6.1 Medium
- pixeline bugsCross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version...6.1 Medium
- pixeline bugsCross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version...6.1 Medium
- pixeline bugsCross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version...6.1 Medium
- detector project detectorCross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below...6.1 Medium
- esri portal for arcgisStored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.5.4 Medium
- esri portal for arcgisA reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.6.1 Medium
- esri portal for arcgisThere is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.8.8 High
- pardus liderahenk, tubitak lider +1 moreMissing Authorization Checks in LiderAhenk9.6 Critical
- online food ordering web app project food ordering web appAn un-authenticated error-based and time-based blind SQL injection vulnerability exists in...9.1 Critical
- online-shopping-system-advanced project online-shopping-system-advancedAn un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced...7.5 High
- online-shopping-system-advanced project online-shopping-system-advancedAn un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced...9.8 Critical
- galera webtemplateGalera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal...9.8 Critical
- scalabium dbase viewerScalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a...7.8 High
- common-workflow-language cwlviewerCWL Viewer: deserialization of untrusted data can lead to complete takeover by an attacker9.1 Critical
- mcafee drive encryption, mcafee,llc mcafee drive encryption (mde) +1 morePrivilege Escalation vulnerability in McAfee Drive Encryption (MDE)8.8 High
- qnap image2pdfStored XSS Vulnerability in Image2PDF5.4 Medium
- qnap photo stationStored XSS Vulnerability in Photo Station7.6 High
- qnap photo stationStored XSS Vulnerability in Photo Station7.6 High
- qnap photo stationStored Cross-site Scripting Vulnerability in Photo Station7.6 High
- qnap qvrCommand Injection Vulnerability in QVR7.2 High
- canonical multipassMacOS version of Multipass incorrect owner for application directory8.8 High
- canonical multipassWindows version of Multipass unauthenticated localhost tcp control socket can perform mounts8.8 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, ruggedcom apr1808 firmware +32 more +34 moreIn the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the...7.8 High
- mediawikiThe ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is...8.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki allows a denial of service5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...6.1 Medium
- gpac mp4boxThere is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the...7.5 High
- gpac mp4boxThere is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in...7.5 High
- gpac mp4boxThere is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +192 more +194 moreImproper authentication of sub-frames of a multicast AMSDU frame can lead to information...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +63 more +65 morePossible buffer over read due to improper buffer allocation for file length passed from user...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6391 firmware +39 more +41 morePossible out of bound access due to lack of validation of page offset before page is inserted in...8.4 High
:unknown:AndroidIn GPRS encryption support, there is a possible leak of GPRS key material due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed…No score- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 morePossible buffer over read due to lack of length check while parsing beacon IE response in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +126 more +128 morePossible buffer over read due to improper validation of frame length while processing AEAD...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +60 more +62 moreImproper validation of kernel buffer address while copying information back to user buffer can...6.2 Medium
- Show moreLoading…