CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- tonec internet download managerInternet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the...7.1 High
- sugarcrmSugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS) vulnerability in the...5.4 Medium
- sugarcrmMultiple cross-site scripting (XSS) vulnerabilities in the Sales module of SugarCRM v6.5.18...5.4 Medium
- froxlorFoxlor cross-site scripting (XSS) vulnerability5.4 Medium
- perfexcrm perfex crmPerfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- cct95 chichen tech cmsChichen Tech CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the...9.8 Critical
- krylack zip password recoveryPasscovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow...7.8 High
- tonec internet download managerInternet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the...6.7 Medium
- flashgetFlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory'...8.8 High
- aplixio pdf shapingupAplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a...7.8 High
- draytek vigorap 1000c firmware, vigorap 700 firmware, vigorap 710 firmware +10 more +12 moreDraytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS...5.4 Medium
- madeportable playablePortable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in...7.8 High
- swiftfiletransfer swift file transferSwift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS...6.1 Medium
- dropouts air shareDropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- sky file project fileAn issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via...6.5 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...5.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...5.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...5.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...6.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...5.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...6.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...6.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...6.1 Medium
- taotesting tao assessment platformTAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting ...5.4 Medium
- macrob7 macs framework content management system project macs framework content management systemMacrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS)...5.4 Medium
- sugarcrmMultiple cross-site scripting (XSS) vulnerabilities in the Support module of SugarCRM v6.5.18...5.4 Medium
- swiftfiletransfer swift file transferSwift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- ibm business automation workflowIBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting...5.4 Medium
- elabftwBypass bruteforce protection on login form in elabftw5.9 Medium
- rasa xRasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within sp…5.5 Medium
- salesagility suitecrmSuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name...8.8 High
- gjson project gjsongithub.com/tidwall/gjson Vulnerable to REDoS attack7.5 High
opensslTuxCare,openssl-develTuxCare,openssl-perlTuxCare +1 more +3 moreUpdate of opensslNo scorerucio-webuiPyPIAuthentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webuiNo score- checkpoint harmony browse, sandblast agent for browsers +1 moreThe Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to...7.8 High
- google androidIn startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app...5.5 Medium
- google androidIn getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long...5.5 Medium
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 moreEmerson WirelessHART Gateway8.0 High
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 moreEmerson WirelessHART Gateway8.0 High
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 moreEmerson WirelessHART Gateway8.0 High
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 moreEmerson WirelessHART Gateway8.0 High
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 moreEmerson WirelessHART Gateway8.0 High
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 moreEmerson WirelessHART Gateway8.0 High
- trane tracer sc, tracer sc firmware +1 moreTrane Building Automation Controllers Cross-site Scripting6.3 Medium
- simple payroll system with dynamic tax bracket project payroll system with dynamic tax bracketThe Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by:...9.8 Critical
sodiumoxidecrates.iosodiumoxide is deprecatedNo score- showdocShowdoc File Upload Vulnerability9.8 Critical
- csdn appCross-Site Scripting (XSS) vulnerability exists in Csdn APP 4.10.0, which can be exploited by...6.1 Medium
- yonyou ufida product lifecycle managementAll versions of yongyou PLM are affected by a command injection issue. UFIDA PLM (Product Life...9.8 Critical
- automatedlogic webctrlThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a...6.1 Medium
- Show moreLoading…