CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows exFAT File System Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Fast FAT File System Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Print Spooler Spoofing Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows TCP/IP Denial of Service Vulnerability7.5 High
- microsoft exchange server, exchange server 2016 cumulative update 21, exchange server 2016 cumulative update 22 +2 more +4 moreMicrosoft Exchange Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreStorage Spaces Controller Elevation of Privilege Vulnerability7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 21 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.0 Critical
- sonicwall sonicosA Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to...6.1 Medium
- zephyrproject zephyrRCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr7.1 High
- zephyrproject zephyrInteger Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr8.3 High
- zephyrproject zephyrUnexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr6.5 Medium
- zephyrproject zephyrInteger Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal7.5 High
- gpacMemory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial...5.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based...5.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function...5.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based...5.5 Medium
- gpacMemory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a...5.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in...5.5 Medium
- electronSandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API6.8 Medium
- froxlorFroxlor SQL injection vulnerability9.8 Critical
- ibm data risk managerIBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an...5.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- hitachi it operations director, job management partner 1\/it desktop management-manager, job management partner 1\/it desktop management 2-manager +11 more +13 moreHitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with...7.0 High
- hitachi it operations director, job management partner 1\/it desktop management-manager, job management partner 1\/it desktop management 2-manager +11 more +13 moreHitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution...8.1 High
- redmine, debian linux +1 moreRedmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due...5.3 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X...4.7 Medium
- microsoft .net, .net 5.0, visual studio 2019 version 16.11 (includes 16.0 - 16.10) +4 more +6 more.NET Core and Visual Studio Information Disclosure Vulnerability5.7 Medium
- os4ed opensisAn SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2)...9.8 Critical
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +3 more +5 moreTIBCO JasperReports XML Eternal Entity (XXE) vulnerability7.5 High
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +3 more +5 moreTIBCO JasperReports FTP Password exposed9.0 Critical
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +3 more +5 moreTIBCO JasperReports unauthorized access to temporary object5.7 Medium
- dzzofficeA Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew...5.4 Medium
aspnetcore-runtime-3.1AlmaLinux,aspnetcore-targeting-pack-3.1AlmaLinux,dotnet-apphost-pack-3.1AlmaLinux +5 more +7 more.NET Core 3.1 bugfix updateNo score- redhat coreos-installercoreos-installer improperly verifies GPG signature when decompressing gzipped artifact7.8 High
github.com/foxcpp/maddyGoMD5 hash support in github.com/foxcpp/maddy3.0 Low@redocly/openapi-clinpmPath traversal when using `preview-docs` when working dir contains files with question mark `?` in nameNo score- fastify fastify-staticDOS and Open Redirect with user input8.8 High
- puma, debian linux +1 moreInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Low
- solarwinds pingdomSession Management Vulnerability4.8 Medium
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA remote unauthorized read access to files vulnerability was discovered in Aruba Instant version...6.5 Medium
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba...5.3 Medium
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP)...7.2 High
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP)...7.2 High
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP)...7.2 High
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s):...9.8 Critical
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (crystal reports) +1 moreSAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows...7.5 High
- sap successfactors mobile, sap se successfactors mobile application (for android devices) +1 moreA vulnerability has been identified in SAP SuccessFactors Mobile Application for Android -...5.5 Medium
- sap netweaverSAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs,...6.1 Medium
- sap netweaver application server abap, sap se netweaver application server for abap (sap cloud print manager and sapsprint) +1 moreClient-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application...9.8 Critical
- Show moreLoading…