CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router4.7 Medium
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router6.5 Medium
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router9.8 Critical
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router8.8 High
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router6.4 Medium
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router8.7 High
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router9.1 Critical
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router6.3 Medium
- synchro bulletin board systemAn issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS,...7.5 High
- revisorlab video management systemRevisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability....7.5 High
- alkacon opencms, org.opencms opencms-core +1 moreOpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap5.4 Medium
- omron cx-supervisorOut-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with...6.5 Medium
unicornOSS-FuzzUNKNOWN READ in helper_be_stw_mmu_armebNo score- debian linux, linux kernel, fedoraproject fedora +18 more +20 moreA flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the...7.4 High
linux-azure-5.11Ubuntulinux-azure, linux-azure-5.11 regressionNo score- enalean tuleapSQL injection in the "SVN core" commits browser8.8 High
- enalean tuleapSQL injection in CVS revisions browser8.8 High
- anuko timetrackerReflected XSS vulnerability6.8 Medium
- evm project evmSpecification non-compliance in JUMPI8.7 High
- frentix openolatPath Traversal in Folder Component Leading to Local File Inclusion7.7 High
- portainerCross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box...6.1 Medium
- backstagePath Traversal in @backstage/plugin-scaffolder-backend6.8 Medium
- patriksimek vm2Sandbox Bypass9.8 Critical
- ibm business automation workflowIBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting...5.4 Medium
- asus ux582lr firmwareASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow...6.8 Medium
- signalwire freeswitchAn issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch...7.5 High
- owasp java html sanitizer, oracle middleware common libraries and tools, primavera unifier +2 morePolicies not properly enforced in OWASP Java HTML Sanitizer9.8 Critical
- microco bluemonday, python pybluemonday +1 morePolicies not properly enforced in bluemonday9.8 Critical
- apache supersetPossible SQL Injection when template processing is enabled8.8 High
- apache supersetXSS vulnerability on Explore page5.4 Medium
- unknown gutenberg pdf viewer block, pdf viewer block for gutenberg project viewer block for gutenberg +1 moreGutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- mainwp child reports, unknown mainwp child reports +1 moreMainWP Child Reports < 2.0.8 - Admin+ SQL Injection7.2 High
- catch plugins generate child theme, catch themes demo import themes demo import, catchplugins catch scroll progress bar +15 more +17 moreMultiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change5.7 Medium
- secondlinethemes podcast subscribe buttonsPodcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS5.4 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting4.8 Medium
- tammersoft shared files, unknown easy download manager and file sharing plugin with frontend file upload – a better media library — shared files +1 moreShared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting4.8 Medium
- tips and tricks hq compact wp audio playerCompact WP Audio Player < 1.9.7 - Setting Change via CSRF6.5 Medium
- tips and tricks hq compact wp audio playerCompact WP Audio Player < 1.9.7 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- dearhive dearflip, unknown pdf flipbook, 3d flipbook wordpress – dearflip +1 moreDflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreLearnPress < 4.1.3.1 - Multiple Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wordpress pdf light viewer plugin, teamlead pdf-light-viewer +1 morePDF Light Viewer < 1.4.12 - Authenticated Command Injection8.8 High
- find my blocks project my blocks, unknown find my blocks +1 moreFind My Blocks < 3.4.0 - Private Post Titles Disclosure5.3 Medium
- onedesigns one user avatar, unknown one user avatar | user profile picture +1 moreOne User Avatar < 2.3.7 - Avatar Update via CSRF6.5 Medium
- onedesigns one user avatar, unknown one user avatar | user profile picture +1 moreOne User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown scroll baner, scroll banner project banner +1 moreScroll Baner <= 1.0 - CSRF to RCE6.5 Medium
- unknown customer service software & support ticket system, emarketdesign customer service software \& support ticket system +1 moreWP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- gamepress project gamepress, unknown gamepress – the game database plugin +1 moreGamePress <= 1.1.0 - Reflected Cross-Site Scripting6.1 Medium
- wechat reward project reward, unknown 微信打赏（wechat reward) +1 moreWechat Reward <= 1.7 - CSRF to Stored Cross-Site Scripting5.4 Medium
- sociable project sociableSociable <= 4.3.4.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wp cookie choice, wp cookie choice project cookie choice +1 moreWP Cookie Choice <= 1.1.0 - CSRF to Stored Cross-Site Scripting6.5 Medium
- Show moreLoading…