CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- enalean tuleapThe update of the CI job targeted by a widget is vulnerable to blind SQL injections8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...6.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...6.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s):...8.1 High
- enalean tuleapSQL injection in the planning edition panel7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager...9.8 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass...6.5 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager...7.8 High
- bfabiszewski bfabiszewski/libmobi, libmobi project libmobi +1 moreOut-of-bounds Read in bfabiszewski/libmobi7.1 High
- stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 moreImproper Restriction of XML External Entity Reference in stanfordnlp/corenlp9.8 Critical
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- bookstackapp bookstack, bookstackapp/bookstack +1 morePath Traversal in bookstackapp/bookstack4.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s):...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass...7.5 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager...9.8 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s):...8.8 High
- advantech webaccess scadaAdvantech WebAccess SCADA4.3 Medium
- author bio box bio boxAuthor Bio Box <= 3.3.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- kajoom kjm admin notices, kjm admin notices admin notices +1 moreKJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- wpgenious wpgenius job listing, wpgenius job listing job listing +1 moreWpGenius Job Listing <= 1.0.2 Authenticated Stored Cross-Site Scripting5.5 Medium
- mybb cross-poster cross-posterMyBB Cross-Poster <= 1.0 Authenticated Stored Cross-Site Scripting5.5 Medium
- cnrs halHAL <= 2.1.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- job-portaljob-portal <= 0.0.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- job manager manager, jobscore job manager +1 moreJob Manager <= 0.7.25 Authenticated Stored Cross-Site Scripting5.5 Medium
- job board vanila plugin board vanila plugin, perceptionsystem job board vanila +1 moreJob Board Vanila Plugin <= 1.0 Authenticated Stored Cross-Site Scripting5.5 Medium
- business manager manager, bzmngr business manager +1 moreBusiness Manager – WordPress ERP, HR, CRM, and Project Management Plugin <= 1.4.5 Authenticated Stored Cross-Site Scripting5.5 Medium
- huachu digital technology co.,ltd. easytest, huaju easytest online learning test platform +1 moreHuachu Digital Technology Co.,Ltd. Easytest - Improper Authorization4.3 Medium
- huachu digital technology co.,ltd. easytest, huaju easytest online learning test platform +1 moreHuachu Digital Technology Co.,Ltd. Easytest - Stored XSS5.4 Medium
- huachu digital technology co.,ltd. easytest, huaju easytest online learning test platform +1 moreHuachu Digital Technology Co.,Ltd. Easytest - SQL Injection-28.8 High
- huachu digital technology co.,ltd. easytest, huaju easytest online learning test platform +1 moreHuachu Digital Technology Co.,Ltd. Easytest - SQL Injection-18.8 High
- shinher information co., ltd. studyonline system, xinheinformation xinhe teaching platform system +1 moreShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-34.3 Medium
- shinher information co., ltd. studyonline system, xinheinformation xinhe teaching platform system +1 moreShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-25.4 Medium
- shinher information co., ltd. studyonline system, xinheinformation xinhe teaching platform system +1 moreShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-18.8 High
- shinher information co., ltd. studyonline system, xinheinformation xinhe teaching platform system +1 moreShinHer Information Co., LTD. ShinHer StudyOnline System - Stored XSS5.4 Medium
javapackages-toolsSUSE,mysql-connector-javaSUSE,protobufSUSE +2 moreSecurity update for javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflagsNo score- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...7.2 High
rpmSUSE,python-rpmSUSE,rpm-ndbSUSE +2 moreSecurity update for rpmNo scorerpmopenSUSE,python-rpmopenSUSE,rpm-ndbopenSUSE +2 moreSecurity update for rpmNo scorelinux-azureUbuntu,linux-azure-5.4Ubuntu +1 morelinux-azure, linux-azure-5.4 regressionNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_funcall_with_blockNo scorejsoupOSS-FuzzUncaught exception in org.jsoup.parser.HtmlTreeBuilder.processNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_funcall_with_blockNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_funcall_with_blockNo scoreopenexrOSS-FuzzHeap-buffer-overflow in Imf_3_1::memstream_readNo scoreunicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo score- Show moreLoading…