CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- tendacn ac10u firmware, ac9 firmware +1 moreStack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06...9.8 Critical
- kubernetes ingress-nginx, netapp trident +1 moreIngress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces7.6 High
net-snmpOSS-FuzzHeap-buffer-overflow in asn_build_stringNo scorenet-snmpOSS-FuzzHeap-buffer-overflow in asn_realloc_rbuild_stringNo scorelibdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- webkitgtkIn WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different...6.5 Medium
- webkitgtkIn WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore:...6.5 Medium
linux-buildinfo-4.4.0-211-genericTuxCare,linux-buildinfo-4.4.0-211-lowlatencyTuxCare,linux-cloud-tools-4.4.0-211TuxCare +19 more +21 moreFix CVE(s):No score- irfanviewIrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified...7.8 High
- irfanviewIrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified...7.8 High
- jupyterhub firstuseauthenticator, first use authenticator +1 moreImproper Access Control in jupyterhub-firstuseauthenticator9.1 Critical
- tiki tikiwiki cms\/groupwareTikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the...5.4 Medium
- tiki tikiwiki cms\/groupwareTikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the...5.4 Medium
- monstraA remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action...9.8 Critical
- mara cms project cmsA remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of...9.8 Critical
- mara cms project cmsA cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to...5.4 Medium
- apple ipados, tvos, watchos +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and...7.8 High
- apple macos, mac os x +1 moreThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1....5.5 Medium
- apple ipados, tvos, watchos +3 more +5 moreThis issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...7.8 High
- apple macosA permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur...5.5 Medium
- apple ipados, tvos, watchos +3 more +5 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS...5.5 Medium
- apple ipados, macos, safari +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12...6.5 Medium
- apple ipados, tvos, watchos +3 more +5 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS...2.4 Low
- apple ipados, safari, tvos +4 more +6 moreA type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14...8.8 High
- apple ipados, tvos, watchos +3 more +5 moreThis issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15...5.5 Medium
- apple macos, watchos +1 moreA logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6,...6.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. A...6.5 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS...7.8 High
- flatcore flatcore-cms, flatcore/flatcore-cms +1 moreUnrestricted Upload of File with Dangerous Type in flatcore/flatcore-cms8.0 High
github.com/treeverse/lakefsGoImproper Access Control in github.com/treeverse/lakefs5.7 Medium- raonwiz dext5 upload, dext5 dext5upload +1 moreRAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability7.5 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQP6.5 Medium
- vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 moreImproper Output Neutralization for Logs in Spring Framework4.3 Medium
- vmware spring data restExposure of Resource to Wrong Sphere in Spring Data REST5.3 Medium
- vmware spring cloud openfeignExposure of Resource to Wrong Sphere in Spring Cloud OpenFeign7.5 High
- sourcecodester news247 cmsCross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search...6.1 Medium
- hznuoj project hznuojA cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php...6.1 Medium
KernelLinuxbtrfs: fix abort logic in btrfs_replace_file_extentsNo scoreKernelLinuxxhci: Fix command ring pointer corruption while aborting a commandNo scoreKernelLinuxefi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()No scoreKernelLinuxdm: fix mempool NULL pointer race when completing IONo scoreKernelLinuxusb: musb: dsps: Fix the probe error pathNo score- bitdefender gravityzone, gravityzone update server +1 morePath traversal vulnerability in Bitdefender GravitZone Update Server in relay mode7.1 High
KernelLinuxiio: adis16475: fix deadlock on frequency setNo scoreKernelLinuxnvme-pci: Fix abort command idNo score- Show moreLoading…