Skip to content
OpenAdvisories

Archive

October 2021

Vulnerabilities first published in this month (UTC), newest first.

← September 2021 2021 / October November 2021 →
  1. 170
  2. 2 
  3. 3 
  4. 496
  5. 557
  6. 6129
  7. 770
  8. 859
  9. 9 
  10. 103
  11. 1166
  12. 1274
  13. 13120
  14. 1434
  15. 1559
  16. 16 
  17. 17 
  18. 1864
  19. 19120
  20. 20191
  21. 2159
  22. 22101
  23. 23 
  24. 24 
  25. 2584
  26. 2643
  27. 2770
  28. 28106
  29. 2931
  30. 301
  31. 3111
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.9
    CVE-2021-36808 Public exploit

    A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…

    Sophos Sophos Secure Workspace for Android Android Network devices
  • Medium 6.5
    CVE-2021-41184 Public exploit EPSS 41%

    XSS in the `of` option of the `.position()` util

    jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

    jquery jquery-ui jqueryui jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  • Medium 6.5
    CVE-2021-41182 Public exploit EPSS 39%

    XSS in the `altField` option of the Datepicker widget

    jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…

    jquery jquery-ui drupal7 jqueryui Debian Ubuntu Alpine npm Maven NuGet RubyGems
  • Medium 5.3
    CVE-2021-41160 Public exploit

    Improper region checks in FreeRDP allow out of bound write to memory

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphic…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2021-35616 Public exploit EPSS 28%

    Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Th…

    Oracle Transportation Management
  • Medium 5.9
    CVE-2021-2471 Public exploit

    Incorrect Authorization in MySQL Connector Java

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…

    Oracle MySQL Connectors percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Maven
  • Medium 5.5
    CVE-2021-41338 Public exploit

    Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

    Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.1
    CVE-2021-42053 Public exploit

    Cross-site scripting in Unicorn framework

    The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

    django-unicorn PyPI
  • Medium 6.3
    CVE-2021-41091 Public exploit

    Insufficiently restricted permissions on data directory in Docker Engine

    Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing …

    moby moby docker.io docker.io Debian Ubuntu Alpine Go
  • Medium 5.3
    CVE-2021-22557 Public exploit

    Code execution in SLO Generator via YAML Payload

    SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173

    Google SLO Generator slo-generator PyPI