Archive
October 2021
Vulnerabilities first published in this month (UTC), newest first.
80 results · Clear filters · Feed
-
Medium 5.9CVE-2021-36808 Public exploit
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…
-
Unscored —CVE-2021-41646 Public exploit
Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciousl…
-
Unscored —CVE-2021-41645 Public exploit
Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a …
-
Unscored —CVE-2021-41644 Public exploit
Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously cra…
-
Unscored —CVE-2021-41643 Public exploit
Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload fi…
-
Unscored —CVE-2021-3441 Public exploit
A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cros…
-
Unscored —CVE-2021-31862 Public exploit
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.
-
Unscored —CVE-2021-31624 Public exploit
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows att…
-
Unscored —CVE-2020-23546 Public exploit
IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM fi…
-
Unscored —CVE-2021-30809 Public exploit
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchO…
-
Unscored —CVE-2021-37748 Public exploit
Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.…
-
High 8.6CVE-2021-41078 Public exploit
Nameko Arbitrary code execution due to YAML deserialization
Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.
-
Unscored —
Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Mova…
-
Unscored —
An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upl…
-
Medium 6.5
XSS in the `of` option of the `.position()` util
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…
-
Medium 6.5
XSS in the `altField` option of the Datepicker widget
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…
-
High 7.5CVE-2021-37624 Public exploit
FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, FreeSWITCH does not authenticate SIP MESSAGE reques…
-
Unscored —CVE-2021-24884 Public exploit
Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting
The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like <audio>,<video>,<img>,<a> and<button>.This could allow an unauthenticated, remote attacker to exploit a HTML-injection byinjecting a malicous link. The HTML-in…
-
Critical 9.8
Unsafe Pre-Authentication Deserialization In Workers
An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution (RCE). Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgra…
-
Critical 9.8
Shell Command Injection Vulnerability in Nimbus Thrift Server
A Command Injection vulnerability exists in the getTopologyHistory service of the Apache Storm 2.x prior to 2.2.1 and Apache Storm 1.x prior to 1.2.4. A specially crafted thrift request to the Nimbus server allows Remote Code Execution (RCE) prior to authenti…
-
Critical 9.8
BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code executio…
KEV Nov 3, 2021 -
Unscored —CVE-2021-42556 Public exploit
Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to l…
-
Unscored —
SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumst…
-
Unscored —CVE-2021-0705 Public exploit
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…
-
Unscored —CVE-2021-0652 Public exploit
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …
-
Unscored —
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for r…
-
High 7.2
Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload
The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it …
-
Medium 5.3CVE-2021-41160 Public exploit
Improper region checks in FreeRDP allow out of bound write to memory
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphic…
-
Unscored —CVE-2021-42327 Public exploit
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14…
-
Medium 5.4
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Th…
-
Medium 5.9CVE-2021-2471 Public exploit
Incorrect Authorization in MySQL Connector Java
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
-
Low 2.7CVE-2021-35576 Public exploit
Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported ve…
-
Unscored —CVE-2021-35323 Public exploit
Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS…
KEV Nov 3, 2021 -
Unscored —CVE-2021-42261 Public exploit
Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation cou…
-
Unscored —CVE-2021-42565 Public exploit
myfactory.FMS before 7.1-912 allows XSS via the UID parameter.
-
Unscored —CVE-2021-42566 Public exploit
myfactory.FMS before 7.1-912 allows XSS via the Error parameter.
-
Unscored —
Buffer overflow in WASM modules in misc/wasm and cmd/link
Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.
-
Unscored —CVE-2018-16061 Public exploit
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.
-
Unscored —
Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory list…