CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- ibm sterling file gateway, sterling b2b integrator +1 moreIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to...4.3 Medium
- teddy project teddyCross-site Scripting (XSS)5.4 Medium
- visual-tools dvr vx16 firmwareIn Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command...9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 morePath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)9.8 Critical
- apache openofficeBillion Laughs6.5 Medium
- apache openofficeDEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid7.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which...5.3 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...9.8 Critical
- artica integria imsIntegria IMS vulnerable to Cross Site Scripting (XSS)5.4 Medium
- artica integria imsIntegria IMS incorrect authorization9.8 Critical
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability7.8 High
- open5gsogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length...7.5 High
- lancom-systems lcosIn LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of...8.8 High
- meross msg100 firmwareMeross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g...8.1 High
- silverstripeSilverStripe GraphQL Server permission checker not inherited by query subclass.4.3 Medium
- silverstripeCross-site Scripting in SilverStripe Framework6.1 Medium
- hashicorp nomadHashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job...6.5 Medium
- concretecms concrete cmsServer-Side Request Forgery vulnerability in concrete59.8 Critical
- artica integria imsIntegria IMS Remote Code Execution9.8 Critical
- mkdocsDirectory traversal in mkdocs7.5 High
- maianscriptworld maian cartMaian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 Medium
- pingidentity pingfederatePing Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE...7.5 High
- accel-pppACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after...7.5 High
- django-unicorn unicornCross-site scripting in Unicorn framework5.4 Medium
- octopus tentacleWhen Octopus Tentacle is installed using a custom folder location, folder ACLs are not set...7.8 High
- octopus server, deploy +1 moreWhen Octopus Server is installed using a custom folder location, folder ACLs are not set...7.8 High
openexrOSS-FuzzHeap-buffer-overflow in unpack_16bitNo scorespirv-toolsOSS-FuzzHeap-buffer-overflow in spvTextEncodeOperandNo scoregrokOSS-FuzzHeap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompressNo scoreopenexrOSS-FuzzHeap-buffer-overflow in Imf_3_1::memstream_readNo score- jenkins git, jenkins project git plugin +1 moreStored XSS vulnerability in Jenkins Git Plugin6.1 Medium
- jenkinsPath traversal vulnerability on Windows in Jenkins6.5 Medium
- jenkinsImproper handling of equivalent directory names on Windows in Jenkins4.3 Medium
- wdja cmsA Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add...6.5 Medium
- Show moreLoading…