CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +2 moreAn arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex...5.5 Medium
- fortinet fortianalyzerAn improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and...4.3 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreAn insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and...8.1 High
- fortinet fortiwebmanager, fortiweb +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and...4.1 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreA path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and...5.4 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreAn information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions...3.2 Low
- fortinet fortisdnconnectorA insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below...4.3 Medium
openexrOSS-FuzzHeap-buffer-overflow in internal_huf_decompressNo score- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 High
- vyperlang vyperBounds check missing for decimal args in Vyper4.3 Medium
- axis os, os 2016, os 2018 +1 more +3 moreA user controlled parameter related to SMTP test functionality is not correctly validated making...8.8 High
- axis os, os 2016, os 2018 +1 more +3 moreA user controlled parameter related to SMTP test functionality is not correctly validated making...7.5 High
- axis os, os 2016, os 2018 +1 more +3 moreUser controlled parameters related to SMTP notifications are not correctly validated. This can...6.8 Medium
- zoho crm lead magnet, zohocorp zoho crm lead magnet +1 moreA Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s...5.4 Medium
- waimai super cms project super cmswaimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component ...6.1 Medium
- waimai super cms project super cmswaimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component ...6.1 Medium
- waimai super cms project super cmswaimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component ...6.1 Medium
- waimai super cms project super cmswaimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form...7.5 High
- scrapy-plugins scrapy-splashSplash authentication credentials potentially leaked to target websites in scrapy-splash7.4 High
- zephyrproject zephyrBuffer overflow in Zephyr USB DFU DNLOAD9.6 Critical
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyr7.0 High
- zephyrproject zephyrZephyr JSON decoder incorrectly decodes array of array7.5 High
- zephyrproject zephyrBT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known4.3 Medium
- zephyrproject zephyrDOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses6.5 Medium
- sylius paypal, paypalplugin +1 moreUnauthorized access to Credit card form in sylius/paypal-plugin7.5 High
- fastify fastify-staticURL Redirection to Untrusted Site ('Open Redirect') in fastify-static6.1 Medium
- composer, tenable tenable.sc +1 moreCommand injection in composer on Windows8.2 High
- grafana, fedoraproject fedora +1 moreSnapshot authentication bypass in grafana9.8 Critical
- tibco activespaces, eftl, ftl +9 more +11 moreTIBCO FTL unvalidated SAN in client certificates7.5 High
- typo3Cross-Site-Request-Forgery in Backend URI Handling in Typo38.8 High
- typo3HTTP Host Header Injection in Request Handling in Typo34.8 Medium
- omikron multicashOmikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a...7.8 High
- wowza streaming engineWowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust...6.5 Medium
- wowza streaming engineA Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5...8.1 High
- archibus web central** UNSUPPORTED WHEN ASSIGNED ** In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web...9.8 Critical
- archibus web central** UNSUPPORTED WHEN ASSIGNED ** ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not...8.8 High
- archibus web central** UNSUPPORTED WHEN ASSIGNED ** In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS...6.1 Medium
opensslTuxCare,openssl-develTuxCare,openssl-perlTuxCare +1 more +3 moreUpdate of openssl-static, openssl-perl, openssl-devel, openssl, openssl-devel, opensslNo score- gitlabapollo_upload_server has Denial of Service vulnerability6.5 Medium
- gitlabA stored Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.7 and...7.3 High
- gitlabThe project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise...4.3 Medium
- gitlabMissing access control in GitLab version 13.10 and above with Jira Cloud integration enabled...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9,...5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9,...6.8 Medium
- gitlabIn all versions of GitLab EE since version 14.1, due to an insecure direct object reference...4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable...4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 7.7, the application may let a malicious user...3.5 Low
- gitlabPermissions rules were not applied while issues were moved between projects of the same group in...2.6 Low
- gitlabIn all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's...5.9 Medium
- Show moreLoading…