CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- shell-quote project shell-quoteImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Critical
- zohocorp manageengine applications managerAn SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.6.5 Medium
- alfresco content services, transform services +1 moreAn issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org...5.3 Medium
- alfresco share, community share +1 moreAn issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community...5.4 Medium
- alfresco content servicesAn issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script...8.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreUnnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a...7.8 High
- trend micro apex one, worry-free business security, trendmicro worry-free business security services +1 more +3 moreUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free...7.8 High
- trend micro apex one, worry-free business security, trendmicro worry-free business security services +1 more +3 moreUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free...7.8 High
- trend micro apex one, worry-free business security, trendmicro worry-free business security services +1 more +3 moreUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free...7.8 High
- trend micro apex one, worry-free business security, trendmicro worry-free business security services +1 more +3 moreUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free...7.8 High
- trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and...7.8 High
- trend micro apex oneAn incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1...7.5 High
- cisco unified computing system (managed), unified computing system +1 moreCisco Integrated Management Controller GUI Denial of Service Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine File Download Vulnerability4.3 Medium
- cisco meeting serverCisco Meeting Server Call Bridge Denial of Service Vulnerability5.9 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco tetration, secure workload +1 moreCisco Tetration Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco telepresence management suite (tms), telepresence management suite +1 moreCisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco webex meetingsCisco Webex Software Application Authorization Bypass Vulnerability4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerabilities6.1 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to modify...6.5 Medium
- cisco ios xe sd-wan software, ios xe, ios xe sd-wan +2 moreCisco IOS XE SD-WAN Software Command Injection Vulnerability7.8 High
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to...5.3 Medium
kimageformatsOSS-FuzzHeap-buffer-overflow in derive_spatial_luma_vector_predictionNo scorefreeradiusOSS-FuzzGlobal-buffer-overflow in fr_unix_time_from_tmNo scoreh3OSS-FuzzUNKNOWN WRITE in h3NeighborRotationsNo scoreopenexrOSS-FuzzHeap-buffer-overflow in hufDecodeNo score- debian linux, fedoraproject fedora, nothings stb image.h +2 moreAn issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end...5.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moredp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux...6.7 Medium
- gnu mailman, debian linux +1 moreGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not...8.0 High
- gnu mailman, debian linux +1 moreGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is...4.3 Medium
- freerdp, fedoraproject fedora +1 moreImproper region checks in FreeRDP allow out of bound write to memory5.3 Medium
- freerdp, fedoraproject fedora +1 moreImproper client input validation for FreeRDP gateway connections allows to overwrite memory5.8 Medium
- php, debian linux, fedoraproject fedora +2 more +4 morePHP-FPM memory access in root process leading to privilege escalation7.8 High
- discourseRCE via malicious SNS subscription payload10.0 Critical
- microsoft surface pro 3, surface pro 3 firmware +1 moreMicrosoft Surface Pro 3 Security Feature Bypass Vulnerability5.6 Medium
- pocoo babel, debian linux +1 moreDirectory Traversal in Babel7.8 High
- proof-of-stake ethereum project ethereumThe Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to...9.1 Critical
- proof-of-stake ethereum project ethereumThe Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to...7.5 High
- proof-of-stake ethereum project ethereumThe Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to...9.1 Critical
- ibm qradar advisorIBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- modern-async project modern-asyncUnlimited requests in modern-async7.5 High
- webkitgtk, wpewebkit wpe webkit, debian linux +1 more +3 moreBubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass...5.3 Medium
- cosmos cosmos-sdk, interchain cosmos sdk +1 moreAuthz Module Non-Determinism6.5 Medium
- zte mf971r firmwareZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit...9.8 Critical
- zte mf971r firmwareZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit...9.8 Critical
- Show moreLoading…