CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- phpgurukul vehicle parking management systemA Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking...5.4 Medium
- online covid vaccination scheduler system project covid vaccination scheduler systemAn SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System...8.1 High
- northern.tech cfengineCFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.6.5 Medium
- northern.tech cfengineThe Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local...5.5 Medium
- customer relationship management system project relationship management systemA file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0...8.8 High
- cloudfoundry capi-release, cf-deployment +1 moreCloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service...7.5 High
- razormist complaint management systemAn SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the...9.8 Critical
- gradle build cache node, enterprise +1 moreIn Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is...9.8 Critical
- spacewalk project spacewalk, uyuni-project uyuni +1 moreSpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 High
- gradle enterpriseAn issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code...7.2 High
- gradle enterpriseIn Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via...5.3 Medium
- skyworthdigital penguin aurora box 41502 firmwareSkyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which...7.5 High
opencryptokiMageiaUpdated opencryptoki packages fix security vulnerabilityNo score- mb connect line mbconnect24, mymbconnect24 +1 moreRemote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.07.5 High
- solarwinds kiwi syslog serverMissing Secure Flag From SSL Cookie3.1 Low
- solarwinds kiwi syslog serverASP.NET Debug Feature Enabled5.3 Medium
- advantech webaccess/nms, webaccess\/nms +1 moreAdvantech WebAccess/NMS Improper Authentication5.3 Medium
- polarsslPolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart,...9.8 Critical
- solarwinds kiwi syslog serverHTTP TRACK & TRACE Methods Enabled5.3 Medium
- calibre-ebook calibreRace condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged...8.1 High
- calibre-ebook calibreA untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the...9.8 Critical
- calibre-ebook calibreInput validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to...9.8 Critical
- trane tracer concierge, tracer sc, tracer sc+ +2 more +4 moreTrane Tracer Code Injection9.9 Critical
- nhn-commerce godomall5, nhn commerce godomall5 std, godomall5 pro +1 moregodomall5 remote code execution vulnerability7.2 High
- helpu helpuviewer, helpuviewer.exe +1 moreHelpu arbitrary file creation vulnerability8.0 High
- huawei ips module firmware, ngfw module firmware, nip6600 firmware +8 more +10 moreThere is an out of bounds write vulnerability in some Huawei products. The vulnerability is...7.5 High
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +1 more +3 moreThere is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific...6.5 Medium
- huawei fusioncube firmwareThere is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to...7.5 High
- huawei imanager neteco 6000 firmware, imanager neteco firmware +1 moreThere is a signature management vulnerability in some huawei products. An attacker can forge...7.2 High
- huawei pc smart full scene, pcmanager +1 moreThere is a path traversal vulnerability in Huawei PC product. Because the product does not filter...6.5 Medium
- huawei imanager neteco, imanager neteco 6000, manageone +2 moreThere is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An...6.8 Medium
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreLame cache can be abused to severely degrade resolver performance5.3 Medium
- mcafee total protection (mtp), total protection, mcafee,llc mcafee total protection (mtp) +2 moreMcAfee Total Protection (MTP) - Privilege Escalation vulnerability6.7 Medium
- mybbMyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly.5.4 Medium
- froala editorCross site scripting in froala-editor6.1 Medium
tzdata-javaAlmaLinuxtzdata bug fix and enhancement updateNo score- facebook hhvmHHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One...8.1 High
- tibco nimbusTIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities8.0 High
wireguard-toolsopenSUSESecurity update for wireguard-toolsNo scorewireguard-toolsSUSESecurity update for wireguard-toolsNo score- shopwareAuthenticated Stored XSS in Administration5.7 Medium
- kizniche mycodoDownload file outside intended directory8.8 High
- pi-hole adminlte, web interface +1 moreStored XSS in Client Groups Management (Authenticated)7.3 High
- antsword redis project redis, medicean as redis +1 moreSelf-XSS in AS_Redis6.4 Medium
apportUbuntuapport vulnerabilityNo score- freeswitchFreeSWITCH vulnerable to SIP digest leak for configured gateways5.8 Medium
- freeswitchFreeSWITCH does not authenticate SIP SUBSCRIBE requests by default5.3 Medium
- openclinic ga project gaOpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users...7.8 High
- gestionaleopen gestionale openAn Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able...7.8 High
- online student admission system project student admission systemOnline Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low...8.8 High
- Show moreLoading…