CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- deno standard modulesDeno before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations.9.8 Critical
- zammadAn issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of...5.3 Medium
- hashicorp vaultIncorrect Privilege Assignment in HashiCorp Vault8.1 High
- gajimGajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash)...7.5 High
- django-unicorn unicornCross-site Scripting in django-unicorn6.1 Medium
openexrOSS-FuzzHeap-buffer-overflow in unpack_32bitNo scoreneutronDebianneutron - security updateNo score- tinyxml project tinyxml, debian linux +1 moreTinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via...7.5 High
- check smart project smartcheck_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only...7.1 High
ammoniacrates.ioXSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tagsNo scoreammoniacrates.ioIncorrect escaping for `url("")` functions in CSS style attributesNo score- orchardcore orchard core, users +1 moreOrchard Core CMS - Improper Session Termination after Password Change8.8 High
open62541OSS-FuzzHeap-buffer-overflow in diagnosticInfoOrderNo scoreopenexrOSS-FuzzHeap-buffer-overflow in unpack_16bitNo scorefreeradiusOSS-FuzzGlobal-buffer-overflow in fr_base16_decode_nstdNo scorefreeradiusOSS-FuzzHeap-buffer-overflow in fr_dns_label_to_value_boxNo score- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0...3.3 Low
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54...5.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote...8.8 High
- limesurveyCross-site Scripting in Limesurvey6.1 Medium
- ardourArdour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc...9.8 Critical
- vitec avediastream m9305 firmware, avediastream m9325 firmware, avediastream m9400 firmware +7 more +9 moreVITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.9.8 Critical
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose...5.1 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain...3.1 Low
- hashicorp vaultHashicorp Vault Privilege Escalation Vulnerability2.9 Low
- mitsubishielectric r12ccpu-v firmwareUncontrolled resource consumption in MELSEC iQ-R series C Controller Module R12CCPU-V all...5.9 Medium
- webtareas project webtareaswebTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean...7.5 High
- webtareas project webtareaswebTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially...8.8 High
- webtareas project webtareaswebTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or...5.4 Medium
- webtareas project webtareaswebTareas version 2.4 and earlier allows an authenticated user to store arbitrary web script or...5.4 Medium
- webtareas project webtareasA Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a...8.8 High
- tad uploaderTad Uploader - Improper Authorization5.3 Medium
- tad tadtoolsTad TadTools - Improper Authorization7.5 High
- tad book3Tad Book3 - Improper Authorization9.1 Critical
- Show moreLoading…