Skip to content
OpenAdvisories

Archive

22 October 2021

Vulnerabilities first published on this day (UTC), newest first.

← September 2021 2021 / October /22 November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

101 results · Feed

  • Critical 9.8
    CVE-2021-42258 Exploited · Ransomware Public exploit EPSS 75%

    BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code executio…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-23040

    Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensiti…

  • Unscored —
    CVE-2020-23039

    Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder fun…

  • Unscored —
    CVE-2020-23038

    Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the pa…

  • Unscored —
    CVE-2020-23037

    Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers t…

  • Unscored —
    CVE-2020-23036

    MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handli…

  • Unscored —
    CVE-2020-23042

    Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in t…

  • Unscored —
    CVE-2020-23041

    Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the pa…

  • Unscored —
    CVE-2020-23043

    Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This v…

  • Unscored —
    CVE-2020-23044

    DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pi…

  • Unscored —
    CVE-2020-23045

    Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via th…

  • Unscored —
    CVE-2020-23046

    DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php…

  • Unscored —
    CVE-2020-23048

    SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the componen…

  • Unscored —
    CVE-2020-23047

    Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnera…

  • Medium 5.4
    CVE-2020-23049

    Cross-site scripting in forkcms

    Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add`, `Edit` or `Register' functions. This vulnerability allows attackers to execute arbitrary web script…

    forkcms/forkcms Packagist
  • Unscored —
    CVE-2020-23051

    Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripti…

  • Unscored —
    CVE-2020-23050

    TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFir…

  • Unscored —
    CVE-2020-23052

    Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in th…

  • Unscored —
    CVE-2020-23054

    A cross-site scripting (XSS) vulnerability in NSK User Agent String Switcher Service v0.3.5 allows attackers to execute…

  • Unscored —
    CVE-2020-23055

    ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scr…

  • Unscored —
    CVE-2020-23058

    An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data.

  • Unscored —
    CVE-2020-23061

    Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` an…

  • Unscored —
    CVE-2020-23060

    Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. Th…

  • Unscored —
    CVE-2020-28955

    SugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS) vulnerability in the Create Employee module. Th…

  • Unscored —
    CVE-2020-28956

    Multiple cross-site scripting (XSS) vulnerabilities in the Sales module of SugarCRM v6.5.18 allows attackers to execute…

  • Medium 5.4
    CVE-2020-28957

    Foxlor cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields.

    froxlor/froxlor Packagist
  • Unscored —
    CVE-2020-28961

    Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./client…

  • Unscored —
    CVE-2020-28960

    Chichen Tech CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the file product_list.php via…

  • Unscored —
    CVE-2020-28963

    Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress func…

  • Unscored —
    CVE-2020-28964

    Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vuln…

  • Unscored —
    CVE-2020-28967

    FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerabilit…

  • Unscored —
    CVE-2020-28968

    Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server …

  • Unscored —
    CVE-2020-28969

    Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) v…

  • Unscored —
    CVE-2020-36485

    Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter …

  • Unscored —
    CVE-2020-36486

    Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via th…

  • Unscored —
    CVE-2020-36489

    Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the de…

  • Unscored —
    CVE-2020-36488

    An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via `/null//` path comman…

  • Unscored —
    CVE-2020-36490

    DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_ma…

  • Unscored —
    CVE-2020-36491

    DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_ma…

  • Unscored —
    CVE-2020-36492

    DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_…