CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- cminds tooltip glossary, unknown cm tooltip glossary – better seo and uex for your wp site +1 moreCM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- codesolz better find and replaceBetter Find and Replace < 1.2.9 - Reflected Cross-Site Scripting6.1 Medium
- dwbooster appointment hour booking, unknown appointment hour booking – wordpress booking plugin +1 moreAppointment Hour Booking < 1.3.16 - Authenticated Stored Cross-Site Scripting4.8 Medium
- wpeverest user registration, unknown user registration – custom registration form, login and user profile for wordpress +1 moreUser Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting5.4 Medium
- meowapps meow gallery, unknown meow gallery (+ gallery block) +1 moreMeow Gallery < 4.1.9 - Contributor+ SQL Injection8.1 High
- google slo generatorCode execution in SLO Generator via YAML Payload5.3 Medium
- salesagility suitecrmSuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.8.8 High
- polycom vvx 400 firmware, vvx 410 firmware +1 morePoly VVX 400/410 through 5.3.1 allows low-privileged users to change the Admin password by...8.8 High
- micron ballistix memory overview display utilityBallistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys...7.8 High
- phpZipArchive::extractTo may extract outside of destination dir5.3 Medium
- telegramThe Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self...3.3 Low
openexrOSS-FuzzHeap-buffer-overflow in unpack_16bit_4chan_planarNo scoreopenexrOSS-FuzzHeap-buffer-overflow in unpack_16bit_4chan_planarNo scoreopenexrOSS-FuzzHeap-buffer-overflow in Imf_3_1::memstream_readNo score- containerd, debian linux, fedoraproject fedora +2 moreInsufficiently restricted permissions on plugin directories5.9 Medium
- moby, fedoraproject fedora +1 more`docker cp` allows unexpected chmod of host files2.8 Low
- redis hiredis, debian linux, netapp management services for element software and netapp hci +2 moreInteger Overflow to Buffer Overflow in Hiredis8.8 High
- qemu, fedoraproject fedora +1 moreAn out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw...6.5 Medium
- libtiffThere exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which...5.5 Medium
chromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilityNo scoreopenexrOSS-FuzzHeap-buffer-overflow in unpack_16bitNo score- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreprealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows...7.8 High
- aviatorscript project aviatorscriptExpression injection in AviatorScript9.8 Critical
- corel coreldraw 2020CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read...5.5 Medium
- corel coreldraw 2020Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when...5.5 Medium
- corel wordperfect 2020Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read...5.5 Medium
- corel presentations 2020IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read...5.5 Medium
- corel wordperfect 2020Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write...7.8 High
- corel presentations 2020IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read...5.5 Medium
- corel presentations 2020UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read...5.5 Medium
- corel photopaint 2020Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability...7.8 High
- corel pdf fusionCorel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted...7.8 High
- corel photopaint 2020CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write...7.8 High
- 3xlogic infinias access controlAn issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting...8.8 High
- jizhicmsJIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release...6.1 Medium
- dell enterprise sonic osDell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure...7.1 High
- dell isilon insightiq, isilon insightiq firmware +1 moreDell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH...8.1 High
- emlogemlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.6.5 Medium
- emlogemlog v6.0.0 contains a SQL injection via /admin/comment.php.7.2 High
- nikhil-bhalerao hotel and lodge management systemSourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL...9.8 Critical
- thycotic secret serverA SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007.6.5 Medium
- corel presentations 2020IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write...7.8 High
- corel presentations 2020IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read...5.5 Medium
- corel photopaint 2020CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write...7.8 High
- corel pdf fusionCoreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when...7.8 High
- corel pdf fusionCorel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a...7.8 High
- justwriting project justwritingCross-site scripting in application/controllers/dropbox.php in JustWriting6.1 Medium
- concrete5-legacy project concrete5-legacyCross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5...6.1 Medium
- concrete5-legacy project concrete5-legacyCross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5...6.1 Medium
- concrete5-legacy project concrete5-legacyCross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types...6.1 Medium
- Show moreLoading…