CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- huawei emui, magic ui +1 moreThere is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this...9.1 Critical
- grandstream ht801 firmwareAn issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From...8.8 High
- grandstream ht801 firmwareMultiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream...8.8 High
- eleveo call recordingZoom Call Recording 6.3.1 from ZOOM International is vulnerable to Java Deserialization attacks...10.0 Critical
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreAn issue was discovered in the Linux kernel before 5.14.8. A use-after-free in...7.8 High
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM...5.5 Medium
radare2OSS-FuzzHeap-buffer-overflow in parse_microsoft_mangled_nameNo scorelibjxlOSS-FuzzHeap-buffer-overflow in jxl::JxlBoxContentDecoder::ProcessNo score- apple macosA resource exhaustion issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreUnrestricted Upload of File with Dangerous Type in bookstackapp/bookstack5.4 Medium
- getgrav getgrav/grav, grav +1 moreCross-site Scripting (XSS) - Stored in getgrav/grav6.3 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.3 High
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii3.5 Low
- nvidia gpu display driverWindows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for...4.7 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...5.5 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...6.5 Medium
- redon-tech roblox-purchasing-hub, redon roblox purchasing hub +1 moreAPI giving out files without key7.5 High
- cszcms csz cmsCSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component ...9.8 Critical
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability8.6 High
- cisco snort, firepower threat defense software, secure firewall management center +1 more +3 moreMultiple Cisco Products Snort Rule Denial of Service Vulnerability8.6 High
- snort, cisco firepower threat defense software, secure firewall management center +2 more +4 moreMultiple Cisco Products Snort Memory Leak Denial of Service Vulnerability6.8 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +8 more +10 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability5.3 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +8 more +10 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities4.7 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities4.7 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability5.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +8 more +10 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance (asa) software, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability8.6 High
- cisco firepower management center, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities4.8 Medium
- cisco firepower management center, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities4.8 Medium
- cisco firepower management center, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability8.1 High
- cisco firepower threat defense software, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability4.4 Medium
- cisco firepower threat defense software, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Threat Defense Software Command Injection Vulnerabilities6.7 Medium
- cisco firepower threat defense software, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Threat Defense Software Command Injection Vulnerabilities6.7 Medium
- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities5.8 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +8 more +10 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability5.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Medium
- phpgurukul news portalSQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1)...5.9 Medium
- phpgurukul online shopping portalAn SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the...7.5 High
- ibm i2 ibaseIBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to...4.0 Medium
- phpgurukul vehicle parking management systemAn SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System...5.9 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering requirements quality assistant on-premises +5 more +7 moreIBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 moreIBM Jazz Team Server products stores user credentials in clear text which can be read by an...6.5 Medium
- ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 moreIBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges...7.5 High
- ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 moreIBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 moreIBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused...3.7 Low
- Show moreLoading…