CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- nextcloud officeonline, kiteworks security-advisories +1 moreFile path disclosure of shared files in OfficeOnline application3.5 Low
- nextcloud deck, kiteworks security-advisories +1 moreMissing permission check on Deck API8.1 High
- nextcloud richdocuments, kiteworks security-advisories +1 moreFile path disclosure of shared files in Richdocuments application4.8 Medium
- nxp mcuxpresso software development kitNXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function...7.8 High
- nxp mcuxpresso software development kitNXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function...7.8 High
- ethereum go ethereum, go-ethereum +1 moreDoS via maliciously crafted p2p message5.7 Medium
- nextcloud contacts, kiteworks security-advisories +1 moreXSS in Contacts6.4 Medium
- nextcloud mail, kiteworks security-advisories +1 moreBypass of image blocking in Nextcloud Mail3.5 Low
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- d-link dap-2020, dlink dap-2020 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dap-2020, dlink dap-2020 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dap-2020, dlink dap-2020 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dap-2020, dlink dap-2020 firmware +1 moreThis vulnerability allows network-adjacent attackers to disclose sensitive information on...6.5 Medium
- teamviewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- convoypanel panellogout CSRF in Pterodactyl Panel4.3 Medium
- freeswitchFreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing7.5 High
- galetteSeveral stored XSS6.8 Medium
- eclipse openj9, eclipse foundation omr, the eclipse foundation eclipse omr +2 moreIn Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for...9.8 Critical
- akauntingAkaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability...5.4 Medium
- ingeteam ingepac da au, ingepac da au firmware +1 moreInformation Exposure in INGEPAC DA AU5.3 Medium
- unknown yop poll, yop poll, yop-poll +2 moreYOP Poll < 6.1.2 - Reflected Cross-Site Scripting6.1 Medium
- strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 moreFormidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting9.6 Critical
- unknown great quotes, great-quotes project great-quotes +1 moreGreat Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wp debugging, wp debugging project debugging +1 moreWP Debugging < 2.11.0 - Unauthenticated Plugin's Settings Update6.5 Medium
- unknown check & log email, wpchill check \& log email +1 moreCheck & Log Email < 1.0.3 - Admin+ SQL Injections7.2 High
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePermalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection7.2 High
- cimatti contact forms, cimatti consulting wordpress contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti < 1.4.12 - Admin+ Stored Cross-Site Scripting4.8 Medium
- easy media download project media download, noor alam easy media download +1 moreEasy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown game server status, game-server-status project game-server-status +1 moreGame Server Status <= 1.0 - Admin+ SQL Injection7.2 High
- brontobytes cookie bar, cookie-bar project cookie-bar +1 moreCookie Bar < 1.8.9 - Admin+ Stored Cross-Site Scripting4.8 Medium
- strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 moreFormidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown responsive wordpress slider, motopress motopress-slider-lite +1 moreResponsive WordPress Slider <= 2.2.0 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- unknown jquery reply to comment, jquery-reply-to-comment project jquery-reply-to-comment +1 morejQuery Reply to Comment <= 1.31 - CSRF to Stored Cross-Site Scripting6.1 Medium
- origincode video gallery, unknown video gallery - vimeo and youtube gallery +1 moreVideo Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown visual form builderVisual Form Builder < 3.0.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- emarket-design request a quoteRequest a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting4.8 Medium
- sanskruti st-daily-tipSt Daily Tip <= 4.7 - CSRF to Stored Cross-Site Scripting8.8 High
- minimus special text boxes, wp-special-textboxes project wp-special-textboxes +1 moreSpecial Text Boxes < 5.9.110 - Admin+ Stored Cross-Site Scripting4.8 Medium
- bplugins video player for youtube, video player for youtube project player for youtube +1 moreYT Player < 1.4 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- ninjaforms contact form, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- google androidIn audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google androidIn audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google androidIn audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google androidIn display driver, there is a possible memory corruption due to uninitialized data. This could...6.7 Medium
- google androidIn display driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google androidIn wifi driver, there is a possible out of bounds read due to a missing bounds check. This could...6.5 Medium
- Show moreLoading…