CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- tad webTad Web - Improper Authorization5.3 Medium
- tad uploaderTad Uploader - Stored XSS6.1 Medium
- tad tadtoolsTad TadTools - Arbitrary File Upload9.8 Critical
- tad tadtoolsTad TadTools - Reflected XSS6.1 Medium
- tad honorTad Honor - Improper Authorization5.3 Medium
- tad book3Tad Book3 - Stored XSS6.1 Medium
- verint workforce optimizationVerint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin...5.3 Medium
- alkacon opencmsXML External Entity Reference in org.opencms:opencms-core6.5 Medium
- digi realport, 6350-sr firmware, cm firmware +16 more +18 moreIn Digi RealPort through 4.8.488.0, authentication relies on a challenge-response mechanism that...9.8 Critical
- digi realport, 6350-sr firmware, cm firmware +15 more +17 moreAn issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to...8.1 High
- digi realport, 6350-sr firmware, cm firmware +15 more +17 moreAn issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists...9.8 Critical
- intelliants subrion cmsA SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.7.2 High
- crypto2 project crypto2Use of a Broken or Risky Cryptographic Algorithm in crypto29.8 Critical
- f-secure atlant, cloud protection for salesforce, elements endpoint detection and response +5 more +7 moreDenial-of-Service (DoS) Vulnerability5.5 Medium
- f-secure atlant, cloud protection for salesforce, elements endpoint detection and response +5 more +7 moreDenial-of-Service (DoS) Vulnerability5.5 Medium
freeradiusOSS-FuzzHeap-buffer-overflow in fr_struct_from_networkNo scorefreeradiusOSS-FuzzHeap-buffer-overflow in fr_dns_label_uncompressed_lengthNo score- debian linux, flatpak, fedoraproject fedora +2 moreSandbox bypass via recent VFS-manipulating syscalls8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to...8.8 High
- sophos hitmanproA local attacker could read or write arbitrary files with administrator privileges in HitmanPro...6.0 Medium
- sophos hitmanpro.alertA local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert...6.7 Medium
- zulipRegular expression denial-of-service in Zulip4.3 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE.9.8 Critical
- jeecms xJEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of ...5.4 Medium
- opensnsOpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController...9.8 Critical
- opensnsOpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController...9.8 Critical
- netsarang xshellXshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title...7.5 High
- thinkphp50-cms project thinkphp50-cmsThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public...9.8 Critical
- zammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send...6.5 Medium
- zammadAn issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.5.4 Medium
- zammadAn issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and...8.8 High
- zammadAn issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via...4.9 Medium
- zammadAn issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because...6.1 Medium
- zammadAn issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information.7.5 High
- zammadAn issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code...9.8 Critical
- zammadAn issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.9.1 Critical
- zammadAn issue was discovered in Zammad before 4.1.1. Stored XSS may occur via an Article during...5.4 Medium
- zammadAn issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a...7.2 High
- zammadAn issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages.9.8 Critical
- cloudendpoints esp, google extensible service proxy +1 moreX-Endpoint-API-UserInfo can be spoofed in cloudendpoints Extensible Service Proxy6.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated...4.3 Medium
- ibm sterling file gateway, sterling b2b integrator +1 moreIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload...6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting....4.9 Medium
- ibm sterling file gateway, sterling b2b integrator +1 moreIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling file gatewayIBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session...6.3 Medium
- ibm sterling file gateway, sterling b2b integrator +1 moreIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to...4.3 Medium
- ibm sterling file gateway, sterling b2b integrator +1 moreIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept...6.5 Medium
- Show moreLoading…