Skip to content
OpenAdvisories

Archive

22 October 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-42258 Exploited · Ransomware Public exploit EPSS 75%

    BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code executio…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2021-42556 Public exploit

    Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to l…

  • Unscored —
    CVE-2021-42840 Public exploit EPSS 59%

    SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumst…

  • Unscored —
    CVE-2021-0705 Public exploit

    In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…

  • Unscored —
    CVE-2021-0652 Public exploit

    In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …

  • Unscored —
    CVE-2021-31682 Public exploit EPSS 11%

    The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for r…