Archive
22 October 2021
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Critical 9.8
BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code executio…
KEV Nov 3, 2021 -
Unscored —CVE-2021-42556 Public exploit
Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to l…
-
Unscored —
SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumst…
-
Unscored —CVE-2021-0705 Public exploit
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…
-
Unscored —CVE-2021-0652 Public exploit
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …
-
Unscored —
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for r…