CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- planso forms, unknown planso forms +1 morePlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting4.8 Medium
- bplugins streamcast – radio player for wordpress, streamcast radio player +1 moreStreamCast < 2.1.1 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- bplugins polo video gallery, unknown polo video gallery – best wordpress video gallery plugin +1 morePolo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- bplugins easy twitter feedEasy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- bplugins html5 audio player, unknown html5 audio player – audio player for wordpress +1 moreHtml5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- devolutions remote desktop managerAn incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16...8.8 High
- rocket.chatA link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS...6.1 Medium
- glasswireA code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that...9.8 Critical
- gonitro nitro pro, nitro pro +1 moreAn exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF...8.8 High
- gonitro nitro pro, nitro pro +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro...8.8 High
- advantech webaccessAdvantech WebAccess9.8 Critical
- advantech webaccessAdvantech WebAccess9.8 Critical
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder3.3 Low
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- clusterlabs pacemaker, cluster glue +1 morestonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it...5.5 Medium
- squid-cache squid, fedoraproject fedora +1 moreAn issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allo…7.5 High
- bestpractical request tracker, debian linux, fedoraproject fedora +2 moreBest Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2...7.5 High
- myfactory fmsmyfactory.FMS before 7.1-912 allows XSS via the UID parameter.6.1 Medium
- myfactory fmsmyfactory.FMS before 7.1-912 allows XSS via the Error parameter.6.1 Medium
- otrsAgents are able to lock the ticket without the "Owner" permission3.5 Low
amd64-microcodeDebianamd64-microcode - regression updateNo score- strongswan, debian linux, fedoraproject fedora +22 more +24 moreThe in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon...7.5 High
- strongswan, debian linux, fedoraproject fedora +17 more +19 moreThe gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate...7.5 High
- debian linux, linux kernel, redhat enterprise linux +2 moreModerate: kernel security and bug fix update4.7 Medium
- abomonation project abomonationAbomonation transmutes &T to and from &[u8] without sufficient constraints7.5 High
freeradiusOSS-FuzzGlobal-buffer-overflow in fr_base16_decode_nstdNo scoreopenexrOSS-FuzzHeap-buffer-overflow in generic_unpackNo score- mitsubishielectric smartrtu firmwareMitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.6.1 Medium
- mitsubishielectric smartrtu firmwareMitsubishi Electric SmartRTU devices allow remote attackers to obtain sensitive information ...7.5 High
- yealink device managementYealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1...9.8 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel...5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely...8.8 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a...4.0 Medium
- iongroup wallstreet suiteA technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with...5.5 Medium
- adobe connectAdobe Connect Reflected Cross Site Scripting6.1 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Use After Free Arbitrary Code Execution7.8 High
- adobe acrobat reader, reader mobile +1 moreAdobe Acrobat Reader Android Abritrary Code Execution Vulnerability7.8 High
- adobe ops-cliOps CLI Deserialization of Untrusted Data leads to Abritrary Code Execution9.8 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information Disclosure3.3 Low
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition6.5 Medium
- fatek automation communication server, fatek communication server firmware +1 moreFATEK Automation Communication Server9.8 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager...9.8 Critical
- Show moreLoading…