CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- samsung notesA possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung...7.3 High
- samsung notesA possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung...7.3 High
- samsung notesA possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung...7.3 High
- samsung notesA possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to...7.3 High
- samsung notesA possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung...4.0 Medium
- samsung notesLack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung...4.0 Medium
- samsung notesLack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung...7.3 High
- vyperlang vyperMemory corruption in Vyper7.5 High
- google android, samsung mobile devices +1 moreA vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL...2.3 Low
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected...5.9 Medium
- google android, samsung mobile devices +1 moreA keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to...6.0 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site...5.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreAssuming radio permission is gained, missing input validation in modem interface driver prior to...3.3 Low
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to stored...6.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated...5.4 Medium
- google android, samsung mobile devices +1 moreLack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct...5.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated...4.3 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR...7.3 High
- google android, samsung mobile devices +1 moreExposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an...2.5 Low
- google android, samsung mobile devices +1 morePath traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows...7.5 High
- google android, samsung mobile devices +1 moreImproper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring...4.0 Medium
- google android, samsung mobile devices +1 moreLack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreSQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted...5.9 Medium
- google android, samsung mobile devices +1 moreAn improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows...6.4 Medium
- google android, samsung mobile devices +1 moreA lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem...4.4 Medium
- google android, samsung mobile devices +1 moreA possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021...7.2 High
- google android, samsung mobile devices +1 moreA possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021...7.2 High
- google android, samsung mobile devices +1 moreAn improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows...4.4 Medium
- google android, samsung mobile devices +1 moreAn information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows...4.1 Medium
- google android, samsung mobile devices +1 moreA possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021...3.9 Low
- google android, samsung mobile devices +1 moreAssuming a shell privilege is gained, an improper exception handling for...4.4 Medium
- google android, samsung mobile devices +1 moreAssuming a shell privilege is gained, an improper exception handling for...4.4 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021...4.0 Medium
- google android, samsung mobile devices +1 moreA lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release...3.7 Low
- google android, samsung mobile devices +1 moreAn improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1...7.9 High
- google android, samsung mobile devices +1 moreA possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021...6.0 Medium
- google android, samsung mobile devices +1 moreA possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR...4.4 Medium
- google android, samsung mobile devices +1 moreAssuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP...5.3 Medium
- wp bannerize bannerizeWP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection6.5 Medium
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreFV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting6.1 Medium
- oracle openjdkAn insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11...7.8 High
- golang go, netapp cloud insights telegraf +1 moreIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 High
- debian linux, fedoraproject fedora, xen +2 morePCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned...7.6 High
- liftoffsoftware gate oneVerification check bypass in Gate One5.3 Medium
- f-secure atlant, cloud protection, endpoint protection products on windows and mac. f-secure linux security (32-bit) f-secure linux security 64 f-secure atlant & f-secure cloud protection for salesforce +2 more +4 moreDenial-of-Service (DoS) Vulnerability5.5 Medium
- Show moreLoading…