CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- boston scientific zoom latitude, bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware +1 moreImproper Access Control for Boston Scientific Zoom Latitude6.5 Medium
- redis, debian linux, fedoraproject fedora +3 more +5 moreVulnerability in handling large ziplists7.5 High
- boston scientific zoom latitude, bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware, zoom latitude programming system model 3120 firmware +2 moreReliance on Component that is not Updateable for Boston Scientific Zoom Latitude6.5 Medium
- boston scientific zoom latitude, bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware +1 moreMissing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude6.2 Medium
- bosch rexroth indramotion mlc l20 firmware, rexroth indramotion mlc l25 firmware, rexroth indramotion mlc l40 firmware +11 more +13 moreLogin with hash10.0 Critical
- bosch rexroth indramotion mlc firmware, rexroth indramotion xlc firmware, rexroth indramotion mlc indramotion xlc +2 moreInformation disclosure8.6 High
- bosch indracontrol xlc firmware, rexroth indramotion mlc l20 firmware, rexroth indramotion mlc l25 firmware +11 more +13 moreInformation disclosure8.6 High
- laquisscada scadaLCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an...7.8 High
- bosch rexroth indramotion mlc l20 firmware, rexroth indramotion mlc l40 firmware, rexroth indramotion mlc l20, l40 +2 moreReflected Cross-Site-Scripting10.0 Critical
- redis, debian linux, fedoraproject fedora +3 more +5 moreLua scripts can overflow the heap-based Lua stack in Redis7.5 High
- gfos workforce managementIn GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication...7.4 High
- paymentplugins stripe for woocommerce, stripe for woocommerce for woocommerce +1 moreStripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking4.3 Medium
- 53kfCross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be...6.1 Medium
- elementsproject c-lightningBlockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.9.4 Critical
- forcepoint next generation firewallForcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable...7.5 High
- meow apps media file renamer – auto & manual rename (wordpress plugin), meowapps media file renamer - auto \& manual rename +1 moreWordPress Media File Renamer – Auto & Manual Rename plugin <= 5.1.9 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious...4.3 Medium
- lightning network daemon project network daemonLightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.8.6 High
- gitlabA potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack...4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored...4.3 Medium
- gitlabImproper authorization checks in GitLab EE > 13.11 allows subgroup members to see epics from all...4.3 Medium
- salesagility suitecrmSuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An...5.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable...4.3 Medium
- acinq eclairACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.9.4 Critical
- gitlabIn all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute...2.9 Low
- salesagility suitecrmSuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An...5.3 Medium
- gitlabInformation disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL...2.0 Low
- gitlabIn all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature...3.8 Low
- gitlabIn all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be...4.3 Medium
- gitlabMissing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker...2.2 Low
- gitlabA vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to...7.7 High
- ptcl hg150-ub firmwareAn issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to...9.8 Critical
- gitlabA Stored XSS in merge request creation page in Gitlab EE version 13.5 and above allows an...8.7 High
- akamai enterprise application accessIn Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x...7.8 High
- janeczku calibre-web, calibreweb +1 moreStored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata5.4 Medium
- onionshareInformation disclosure vulnerability in OnionShare5.3 Medium
- icehrmThe IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an...9.8 Critical
- icehrmA Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of...5.4 Medium
- onionshareRemote unauthenticated attackers able to upload files in Onionshare9.8 Critical
- gilacms gila cmsA Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this...5.4 Medium
- gilacms gila cmsGila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by...7.5 High
- bookingcore booking coreLaravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at...9.8 Critical
- bookingcore booking coreLaravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the...5.3 Medium
- bookingcore booking coreLaravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar...5.4 Medium
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- lodging reservation management system project reservation management systemThe username and password field of login in Lodging Reservation Management System V1 can give...9.8 Critical
traitobjectcrates.iotraitobject is UnmaintainedNo score- hkurl i-panel administration systemA reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System...6.1 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- coinmarketstats bitcoin \/ altcoin payment gateway for woocommerce, unknown bitcoin / altcoin payment gateway for woocommerce & multivendor store / shop +1 moreBitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…