CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Local Privilege Escalation vulnerability7.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script7.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script7.8 High
- juniper junos os evolvedJunos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal8.0 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update7.5 High
- juniper networks src series, juniper session and resource control +1 moreSRC Series: NETCONF over SSH allows negotiation of weak ciphers5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)7.5 High
- juniper networks 128 technology session smart router, juniper 128 technology session smart router firmware +1 moreSession Smart Router: Authentication Bypass Vulnerability9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet7.5 High
- juniper junos os evolvedJunos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions4.7 Medium
- juniper junos os evolvedJunos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication6.5 Medium
- juniper ctpviewCTPView: HSTS not being enforced on CTPView server.7.4 High
- discourse discourse-reactions, reactions +1 moreReactions leak for secure category topics and private messages5.3 Medium
- amazon toughImproper sanitization of target names in tough8.2 High
- linuxfoundation the update framework, theupdateframework python-tuf +1 moreClient metadata path-traversal in python-tuf7.5 High
- combodo itopReflected XSS in Combodo/iTop8.1 High
- combodo itopUnauthorized setup leads to SSRF in Combodo/iTop8.7 High
- bluditCross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.6.1 Medium
- microweberCross Site Scripting in Microweber6.1 Medium
KernelLinuxcifs: Fix soft lockup during fsstressNo scoreKernelLinuxstaging: greybus: uart: fix tty use after freeNo scoreKernelLinuxbinder: make sure fd closes completeNo scoreKernelLinuxxen/x86: fix PV trap handling on secondary processorsNo scoreKernelLinuxmcb: fix error handling in mcb_alloc_bus()No scoreKernelLinuxdrm/amd/pm: Update intermediate power state for SINo scoreKernelLinuxnexthop: Fix division by zero while replacing a resilient groupNo scoreKernelLinuxcomedi: Fix memory leak in compat_insnlist()No scoreKernelLinuxafs: Fix page leakNo scoreKernelLinuxafs: Fix corruption in reads at fpos 2G-4G from an OpenAFS serverNo scoreKernelLinuxvirtio-net: fix pages leaking when building skb in big modeNo scoreKernelLinuxenetc: Fix illegal access when reading affinity_hintNo scoreKernelLinuxnet/smc: fix 'workqueue leaked lock' in smc_conn_abort_workNo scoreKernelLinuxs390/qeth: fix NULL deref in qeth_clear_working_pool_list()No scoreKernelLinuxmptcp: ensure tx skbs always have the MPTCP extNo scoreKernelLinuxnexthop: Fix memory leaks in nexthop notification chain listenersNo scoreKernelLinuxnet: macb: fix use after free on rmmodNo scoreKernelLinuxirqchip/gic-v3-its: Fix potential VPE leak on errorNo scoreKernelLinuxdma-debug: prevent an error message from causing runtime problemsNo scoreKernelLinuxmd: fix a lock order reversal in md_allocNo scoreKernelLinuxblktrace: Fix uaf in blk_trace access after removing by sysfsNo scoreKernelLinuxbpf: Add oversize check before call kvcalloc()No scoreKernelLinuxxen/balloon: use a kernel thread instead a workqueueNo scoreKernelLinuxnvme-rdma: destroy cm id before destroy qp to avoid use after freeNo scoreKernelLinuxblk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pdNo scoreKernelLinuxHID: amd_sfh: Fix potential NULL pointer dereferenceNo scoreKernelLinuxASoC: SOF: Fix DSP oops stack dump output contentsNo scoreKernelLinuxs390/qeth: Fix deadlock in remove_disciplineNo score- Show moreLoading…