CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- gitlabA business logic error in the project deletion process in GitLab 13.6 and later allows persistent...5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability...6.5 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in...5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens...6.5 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea...6.5 Medium
- gitlabIn all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of...5.3 Medium
- gitlabIn all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups...4.3 Medium
- gitlabIn all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to...5.3 Medium
- gitlabIn all versions of GitLab EE since version 13.10, a specific API endpoint may reveal details...4.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed...5.3 Medium
- gitlabA stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version...5.8 Medium
- afian filerunAfian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during...6.1 Medium
- afian filerunAfian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path...7.2 High
- nagios xiNagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability...6.5 Medium
- afian filerunAfian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path...7.2 High
- afian filerunAfian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled...6.1 Medium
- gitlabA stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE...7.3 High
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morePath traversal and file disclosure vulnerability in Apache HTTP Server 2.4.499.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morenull pointer dereference in h2 fuzzing7.5 High
unicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo scoreopenexrOSS-FuzzHeap-buffer-overflow in generic_unpackNo score- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreThe decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a...7.8 High
- gclib project gclibAn out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to...8.8 High
- mysurvey survey solutions, surveysolutions +1 moreExposure of Sensitive Information to an Unauthorized Actor in WB.UI.Headquarters.dll5.3 Medium
- xiuno xiunobbsA cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS...6.1 Medium
- xiuno xiunobbsA cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS...6.1 Medium
- xiuno xiunobbsA cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0...6.1 Medium
- xiuno xiunobbsAn issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate...5.3 Medium
- maccmsMaccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the...5.4 Medium
- hongcms project hongcmsHongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin...6.5 Medium
- moby, fedoraproject fedora +1 moreInsufficiently restricted permissions on data directory in Docker Engine6.3 Medium
- convoypanel panelAuthentication bypass in Pterodactyl8.1 High
- cli, docker command line interface, fedoraproject fedora +2 moreDocker CLI leaks private registry credentials to registry-1.docker.io5.4 Medium
- maccmsA cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers...6.1 Medium
- maccmsA Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10...8.8 High
- biqs biqsdriveA local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below...7.5 High
- dynamicpagelist3 project dynamicpagelist3ReDoS in DynamicPageList35.3 Medium
- wire wire-serverAccount takeover when having only access to a user's short lived token in wire-server7.4 High
- wire, wireapp wire-ios +1 moreMandatory encryption at rest can be bypassed (UI) in Wire app4.2 Medium
- wire, wireapp wire-ios +1 moreAccount takeover when having only access to a user's short lived token7.4 High
- redis, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow issue with strings in Redis7.5 High
- hotel management system project management systemA blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A...7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow issue with intsets in Redis7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreDoS vulnerability in Redis7.5 High
- redis, debian linux, fedoraproject fedora +5 more +7 moreVulnerability in Lua Debugger in Redis5.3 Medium
- myscada mydesignermySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project...7.8 High
- boston scientific zoom latitude, bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware +1 moreUse of Password Hash with Insufficient Computational Effort for Boston Scientific Zoom Latitude6.9 Medium
- boston scientific zoom latitude, bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware +1 moreMissing Support Integrity Check for Boston Scientific Zoom Latitude6.5 Medium
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow issue with Streams in Redis7.5 High
- Show moreLoading…