October 2021

7 results · Clear filters · Feed

• Critical 9.8
  CVE-2021-42258 Exploited · Ransomware Public exploit EPSS 75%

  BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code executio…

  Oct 22, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30807 Exploited Public exploit EPSS 29%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS…

  Apple macOS macOS
  Oct 19, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-40449 Exploited · Ransomware Public exploit EPSS 82%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2021

  KEV Nov 17, 2021
• High 8.8
  CVE-2021-30632 Exploited Public exploit EPSS 63%

  Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Oct 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-37975 Exploited Public exploit EPSS 35%

  Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Oct 8, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-42013 Exploited · Ransomware Public exploit EPSS 100%

  Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

  It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories a…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
  Oct 7, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-41773 Exploited · Ransomware Public exploit EPSS 100%

  Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

  A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
  Oct 5, 2021

  KEV Nov 3, 2021