CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- xyhcmsXYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php...5.4 Medium
- emlogemlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers...7.2 High
- myucms project myucmsMyucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index...9.1 Critical
- myucms project myucmsMyucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller...9.8 Critical
- myucms project myucmsMyucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller...9.8 Critical
- myucms project myucmsMyucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller...8.8 High
- myucms project myucmsMyucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index...8.1 High
- wdja cmsWDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache...9.1 Critical
- mediawikiAn issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple...5.4 Medium
- mediawikiAn issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev...6.1 Medium
- mediawikiAn issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the...5.4 Medium
- mediawikiAn issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add...4.8 Medium
- mediawikiAn issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters...6.5 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control...7.5 High
- mediawikiAn issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki...6.1 Medium
- mediawikiAn issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in...4.8 Medium
- mediawikiAn issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through...6.1 Medium
- mediawikiAn issue was discovered in the Mentor dashboard in the GrowthExperiments extension in MediaWiki...4.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerability7.5 High
- cisco asyncos, web security appliance (wsa) +1 moreCisco Web Security Appliance Proxy Service Denial of Service Vulnerability8.6 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerability4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine XML External Entity Injection Vulnerability6.4 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities8.8 High
- cisco ip phones with multiplatform firmware, ip conference phone 7832 firmware, ip conference phone 8832 firmware +14 more +16 moreCisco IP Phone Software Arbitrary File Read Vulnerability5.5 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities8.8 High
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities4.9 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance Command Injection Vulnerability8.8 High
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities4.9 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability4.4 Medium
- cisco smart software manager on-premCisco Smart Software Manager Privilege Escalation Vulnerability5.4 Medium
- cisco orbitalCisco Orbital Open Redirect Vulnerability4.7 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities4.3 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities4.3 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities4.3 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities4.3 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities4.3 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities4.3 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Information Disclosure Vulnerability4.3 Medium
libss7MageiaUpdated libss7 packages fix security vulnerabilityNo score- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability7.0 High
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance URL Filtering Bypass Vulnerability5.8 Medium
- golang textgolang.org/x/text/language Out-of-bounds Read vulnerability7.5 High
- ibm powervm hypervisor, powervm hypervisor firmware +1 moreIBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to...8.0 High
- ibm ts7700 firmware, virtualization engine ts7700 3957-vec, virtualization engine ts7700 3957-ved +2 moreThe IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a...9.1 Critical
github.com/foxcpp/maddyGoS3 storage write is not aborted on errors leading to unbounded memory usage7.5 High- hygeia project hygeiaCSV Injection Vulnerability in Hygeia9.1 Critical
- octobercms octoberDeleted Admin Can Sign In to Admin Interface7.2 High
- scrapy, debian linux +1 moreHTTP authentication credential leak to target websites in scrapy5.7 Medium
- samsung galaxy storeIntent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to...7.1 High
- Show moreLoading…