CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- anuko time tracker, timetracker +1 moreReflected XSS vulnerability in time.php8.1 High
- tibco ebx, product and service catalog powered by tibco ebx +1 moreTIBCO EBX Insecure Login Mechanism9.8 Critical
drupal/loft_data_gridsPackagistThis module enables aklump/loft_data_grids to be used as a Drupal module. Excel support was provided by https://packagist.org/packages/phpoffice/phpexcel, which is abandoned and there are known securi…No score- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway8.1 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Null Pointer Dereference6.1 Medium
- vmware vrealize orchestrator, vrealize automation +1 moreVMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to...6.5 Medium
- vmware vrealize log insight, cloud foundation, vrealize suite lifecycle manager +2 moreVMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection...4.3 Medium
- draytek vigorconnectAn information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an...7.5 High
- draytek vigorconnectThe Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was...5.4 Medium
- draytek vigorconnectAn arbitrary file deletion vulnerability exists in the file delete functionality of the...8.1 High
- draytek vigorconnectDraytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not...8.8 High
- draytek vigorconnectAn arbitrary file upload and directory traversal vulnerability exists in the file upload...9.8 Critical
- draytek vigorconnectA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download...7.5 High
- draytek vigorconnectA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download...7.5 High
- vmware vrealize operations, cloud foundation, vrealize suite lifecycle manager +2 moreReleases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF)...2.7 Low
- parity frontierValidity check for signed Frontier-specific extrinsic not called in block execution5.3 Medium
- proofpoint enterprise protectionProofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.7.5 High
- proofpoint spam engineProofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass.7.5 High
- minioBypassing policy restrictions on regular users8.8 High
- vaadin, vaadin vaadin-server +1 moreDenial of service in DataCommunicator class in Vaadin 84.3 Medium
- mozilla thunderbird, debian linux +1 moreThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 Medium
- nike, nike, inc. nike app for android versions prior to 2.177 and nike app for ios versions prior to 2.177.1 +1 moreImproper authorization in handler for custom URL scheme vulnerability in Nike App for Android...6.1 Medium
- soda, inc. snkrdunk market place app for ios, soda-inc snkrdunk +1 moreThe SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate...7.4 High
- inbody, inbody japan inc. app for ios versions prior to 2.3.30 and inbody app for android versions prior to 2.2.90(510) +1 moreInBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90...5.3 Medium
- mario valney og tags, og tags project tags +1 moreCross-site request forgery (CSRF) vulnerability in OG Tags versions prior to 2.0.2 allows a...8.8 High
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1...6.1 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreOpen redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to...6.1 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1...5.4 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of...6.5 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreOperation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9...5.4 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreHTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote...5.3 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML...6.5 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows...5.4 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1...5.4 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1...5.4 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8...5.4 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreDirectory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows...6.5 Medium
- cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service...8.8 High
- microsoft intune management extensionIntune Management Extension Security Feature Bypass Vulnerability4.2 Medium
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +4 more +6 moreActive Directory Federation Server Spoofing Vulnerability5.4 Medium
- microsoft win32k, windows 10 version 2004, windows 10 version 20h2 +11 more +13 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Spoofing Vulnerability5.4 Medium
- microsoft system center 2012 r2 operations manager, system center 2016 operations manager, system center 2019 operations manager +1 more +3 moreSCOM Information Disclosure Vulnerability7.5 High
- microsoft exchange server, exchange server 2016 cumulative update 21, exchange server 2016 cumulative update 22 +2 more +4 moreMicrosoft Exchange Server Spoofing Vulnerability6.5 Medium
- microsoft exchange server, exchange server 2016 cumulative update 21, exchange server 2016 cumulative update 22 +2 more +4 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +14 more +16 moreWindows AppX Deployment Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 2004, windows 10 version 20h2, windows 10 version 21h1 +4 more +6 moreConsole Window Host Security Feature Bypass Vulnerability5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreStorage Spaces Controller Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.1 High
- Show moreLoading…