Skip to content
OpenAdvisories

Archive

18 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /18 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

64 results · Feed

  • Unscored —
    CVE-2021-41990

    The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS si…

    strongswan strongswan strongswan strongswan Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-41991

    The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests w…

    strongswan strongswan strongswan strongswan Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-42098

    An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to by…

    Devolutions Remote Desktop Manager
  • Unscored —
    CVE-2020-8291

    A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks.

  • Unscored —
    CVE-2021-22961

    A code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that could lead to arbitrary c…

  • High 8.8
    CVE-2021-21797 EPSS 15%

    An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted …

  • High 8.8
    CVE-2021-21796 EPSS 16%

    An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially craft…

  • Critical 9.8
    CVE-2021-38389 EPSS 10%

    Advantech WebAccess

    Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.

    Advantech WebAccess
  • Critical 9.8
    CVE-2021-33023

    Advantech WebAccess

    Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

    Advantech WebAccess
  • High 7.8
    CVE-2021-38436

    FATEK Automation WinProladder

    FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. An attacker could leverage this vulnerability to execute arbitrary code in the…

    FATEK Automation WinProladder
  • High 7.8
    CVE-2021-38438

    FATEK Automation WinProladder

    A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution.

    FATEK Automation WinProladder
  • High 7.8
    CVE-2021-38434

    FATEK Automation WinProladder

    FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute arbitrary code.

    FATEK Automation WinProladder
  • Low 3.3
    CVE-2021-38440

    FATEK Automation WinProladder

    FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information.

    FATEK Automation WinProladder
  • High 7.8
    CVE-2021-38442

    FATEK Automation WinProladder

    FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. An attacker could leverage this vulnerability to execute code in the context of …

    FATEK Automation WinProladder
  • High 7.8
    CVE-2021-38426

    FATEK Automation WinProladder

    FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code.

    FATEK Automation WinProladder
  • High 7.8
    CVE-2021-38430

    FATEK Automation WinProladder

    FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code.

    FATEK Automation WinProladder
  • Unscored —
    CVE-2010-2496

    stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attac…

    pacemaker cluster-glue Debian
  • Unscored —
    CVE-2021-41611

    An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, …

    squid squid Debian Alpine
  • Unscored —
    CVE-2021-38562

    Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive informat…

    request-tracker4 request-tracker4 request-tracker5 request-tracker5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-42565 Public exploit Scanner template

    myfactory.FMS before 7.1-912 allows XSS via the UID parameter.

  • Unscored —
    CVE-2021-42566 Public exploit Scanner template

    myfactory.FMS before 7.1-912 allows XSS via the Error parameter.

  • Low 3.5
    CVE-2021-36097

    Agents are able to lock the ticket without the "Owner" permission

    Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the queue where the agent has "rw" permissions and gain a full control. This issue affects: OTRS AG OTRS 8.0.x version: 8.0.16 and prior version…

    OTRS OTRS
  • Unscored —
    CVE-2021-38297 Public exploit EPSS 11%

    Buffer overflow in WASM modules in misc/wasm and cmd/link

    Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.

    golang go golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go
  • Medium 6.1
    CVE-2021-22942

    Open Redirect in ActionPack

    A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

    rails rails actionpack Debian Ubuntu RubyGems