CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- auvesy versiondogAUVESY Versiondog9.8 Critical
- auvesy versiondogAUVESY Versiondog9.8 Critical
- auvesy versiondogAUVESY Versiondog7.3 High
- auvesy versiondogAUVESY Versiondog4.8 Medium
- auvesy versiondogAUVESY Versiondog8.1 High
- auvesy versiondogAUVESY Versiondog9.1 Critical
- auvesy versiondogAUVESY Versiondog8.2 High
- auvesy versiondogAUVESY Versiondog8.0 High
- auvesy versiondogAUVESY Versiondog7.3 High
- auvesy versiondogAUVESY Versiondog7.3 High
- auvesy versiondogAUVESY Versiondog9.1 Critical
- auvesy versiondogAUVESY Versiondog6.5 Medium
- auvesy versiondogAUVESY Versiondog9.1 Critical
- auvesy versiondogAUVESY Versiondog9.8 Critical
- auvesy versiondogAUVESY Versiondog8.1 High
- auvesy versiondogAUVESY Versiondog8.0 High
- auvesy versiondogAUVESY Versiondog7.3 High
- solarwinds kiwi cattoolsUnquoted Path Vulnerability (SMB Login) in Kiwi CatTools6.7 Medium
- openpowerfoundation skibootAn issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for...9.8 Critical
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreMcAfee ePO Cross-Site Scripting vulnerability5.4 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreMcAfee ePO Cross-Site Scripting vulnerability4.8 Medium
- qnap media streaming add-onCommand Injection Vulnerability in Media Streaming Add-on8.7 High
qtOSS-FuzzUNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppendNo scorendpiOSS-FuzzHeap-buffer-overflow in processClientServerHelloNo score- hcltechsw connections, hcl software "hcl connections" +1 more"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"5.4 Medium
- suluImproper Neutralization HTML tags in sulu/sulu6.2 Medium
- ivorysearch ivory search, ivory search (wordpress plugin) +1 moreWordPress Ivory Search plugin <= 4.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- rasaMaliciously Crafted Model Archive Can Lead To Arbitrary File Write in rasa7.3 High
- reddit snudownHash-Collision Denial-of-Service Vulnerability in snudown6.5 Medium
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreEasy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting4.8 Medium
- heateor sassy social share, sassy social share social share +1 moreSassy Social Share 3.3.23 PHP Object Injection8.8 High
- presstigers simple job board, simple job board job board +1 moreSimple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting5.5 Medium
- catch themes demo import themes demo import, catchplugins catch themes demo import +1 moreCatch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload7.2 High
- content staging stagingContent Staging <= 2.0.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- leaky paywall paywall, zeen101 leaky paywall +1 moreLeaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting5.5 Medium
- learnpressLearnPress – WordPress LMS Plugin <= 4.1.3.1 Authenticated Stored Cross-Site Scripting5.5 Medium
- vmware vrealize operations tenantReleases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure...7.5 High
- adobe connectAdobe Connect Deserialization of Untrusted Data Remote Code Execution9.8 Critical
- fedoraproject fedora, nothings stb image.h +1 moreAn issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit...7.1 High
- solarwinds, solarwinds database performance analyzer +1 moreReflected cross site scripting affecting SolarWinds: DPA 2021.3.73885.5 Medium
- solarwinds access rights managerInsecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM4.7 Medium
- npm, solarwinds network performance monitor +1 moreNetpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.55.0 Medium
- qutebrowserArbitrary command execution on Windows in qutebrowser8.8 High
- arista eosIn Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the devi…5.7 Medium
- ibm transformation extender advancedIBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set...4.3 Medium
- ibm flashsystem 900, flashsystem 9100 family, flashsystem v9000 +17 more +19 moreIBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and...8.8 High
- hcltech traveler companion"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the...3.9 Low
- commscope arris surfboard sb8200 firmwareThe administration web interface for the Arris Surfboard SB8200 lacks any protections against...8.8 High
- wpmailster wp mailsterWP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers...6.1 Medium
- civetweb, siemens sinec infrastructure network services +1 moreThe CivetWeb web library does not validate uploaded filepaths when running on an OS other than...9.8 Critical
- Show moreLoading…