CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- os4ed opensisAn SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via...9.8 Critical
- php-fusion phpfusionPHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will...7.2 High
- miniftpd project miniftpdA Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function...9.8 Critical
- brandy project brandyA buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter...9.8 Critical
- juliangruber keypairInsecure random number generation8.7 High
- telus prv65b444a-s-ts firmwareThe Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an...7.2 High
- telus prv65b444a-s-ts firmwareThe Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an...4.0 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9,...5.5 Medium
- hpe 3par os, alletra 9060 firmware, alletra 9080 firmware +3 more +5 moreA potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage...9.8 Critical
- libreoffice, debian linux +1 moreContent Manipulation with Double Certificate Attack7.5 High
- netapp cloud managerNetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could...7.5 High
- huawei hero-ct060 firmwareThere is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The...9.8 Critical
- google androidIn onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user...7.3 High
- accesspress themes accesspress-basic, accesspress-lite, accesspress-mag +41 more +43 moreAccessPress Themes - Authenticated Malicious File Upload8.8 High
- johnsoncontrols exacqvision server, johnson controls exacqvision web service +1 moreexacqVision Server 32-bit7.5 High
- johnson controls exacqvision web serviceexacqVision Web Service9.8 Critical
- dzzofficeDzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization...5.4 Medium
- php-fusion phpfusionPHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag...6.1 Medium
- os4ed opensisOpensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user...6.1 Medium
- os4ed opensisOpensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of...9.8 Critical
- rconfigInsecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig...8.8 High
- rconfigrConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may...6.5 Medium
- rconfigrConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the...8.8 High
- projectsendProjectsend version r1295 is affected by sensitive information disclosure. Because of not...8.1 High
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreComments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- ayecode geodirectory, unknown business directory plugin | geodirectory +1 moreGeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- kriesi enfoldEnfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- dwbooster appointment hour booking, unknown appointment hour booking – wordpress booking plugin +1 moreAppointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS5.4 Medium
- tipsandtricks-hq software license managerSoftware License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF8.8 High
- awplife weather effect, unknown weather effect – christmas santa snow falling +1 moreWeather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- expresstech quiz and survey master, quiz and survey master – best quiz, exam and survey plugin for wordpress +1 moreQuiz And Survey Master < 7.3.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- kibokolabs chained quizChained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting5.4 Medium
- awplife weather effect, unknown weather effect – christmas santa snow falling +1 moreWeather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting5.4 Medium
- duplicatepro duplicate pageDuplicate Page <= 4.4.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown simple social media share buttons – social sharing for everyone, wpbrigade simple social buttons +1 moreSimple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting4.8 Medium
- ays pro poll makerPoll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection7.5 High
- unknown coming soon and maintenance modeComing Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS5.4 Medium
- techearty easy accordion, shapedplugin easy accordion – best accordion faq plugin for wordpress +1 moreEasy Accordion < 2.0.22 - Authenticated Stored XSS5.4 Medium
- frontend uploader project uploader, unknown frontend uploader +1 moreFrontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- extendify editorskit, munirkamal gutenberg block editor toolkit – editorskit +1 moreEditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution8.8 High
- unknown wp html author bio, wp html author bio project html author bio +1 moreWP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site Scripting5.4 Medium
- projectsendProjectsend version r1295 is affected by a directory traversal vulnerability. A user with...6.5 Medium
- projectsendProjectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking...9.8 Critical
- projectsendProjectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization...5.4 Medium
- cmsuno project cmsunoCMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in ...9.8 Critical
- openwaygroup way4/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to...5.3 Medium
- openwaygroup way4OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.6.1 Medium
- apache openofficeContent Manipulation with Certificate Validation Attack7.5 High
- apache openofficeTimestamp Manipulation with Signature Wrapping5.3 Medium
- apache openofficeDouble Certificate Attack7.5 High
- Show moreLoading…