Skip to content
OpenAdvisories

Archive

1 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /1 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2021-36309

    Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An aut…

    Dell Enterprise SONiC OS
  • High 8.1
    CVE-2021-36298

    Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unau…

    Dell Isilon InsightIQ
  • High 8.8
    CVE-2021-29108

    There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.

    There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another accoun…

    Esri Portal for ArcGIS
  • High 8.8
    CVE-2021-23893

    Privilege Escalation vulnerability in McAfee Drive Encryption (MDE)

    Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.

    McAfee,LLC McAfee Drive Encryption (MDE)
  • High 7.6
    CVE-2021-34356

    Stored XSS Vulnerability in Photo Station

    A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of …

    QNAP Systems Photo Station
  • High 7.6
    CVE-2021-34355

    Stored XSS Vulnerability in Photo Station

    A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Pho…

    QNAP Systems Photo Station
  • High 7.6
    CVE-2021-34354

    Stored Cross-site Scripting Vulnerability in Photo Station

    A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of …

    QNAP Systems Photo Station
  • High 7.2
    CVE-2021-34352

    Command Injection Vulnerability in QVR

    A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.…

    QNAP Systems QVR
  • High 8.8
    CVE-2021-3747

    MacOS version of Multipass incorrect owner for application directory

    The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with incorrect owner.

    Canonical Multipass
  • High 8.8
    CVE-2021-3626

    Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts

    The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

    Canonical Multipass