Archive
October 2021
Vulnerabilities first published in this month (UTC), newest first.
1,718 results · Feed
-
Unscored —
There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerabilit…
-
Unscored —
There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust …
-
Unscored —
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may aff…
-
Unscored —
There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability b…
-
Unscored —
There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may af…
-
Unscored —
There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may …
-
Unscored —
There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerab…
-
Unscored —
There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause D…
-
Unscored —
There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabi…
-
Unscored —
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause pr…
-
Unscored —
There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect …
-
Unscored —
There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may …
-
Unscored —
There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service …
-
Unscored —
There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will ca…
-
Unscored —
There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service …
-
Unscored —
There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may aff…
-
Unscored —
There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnera…
-
Unscored —
There is a DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS attacks.
-
Unscored —
There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect servi…
-
Unscored —
There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may aff…
-
Unscored —
There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect ser…
-
Unscored —
An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From the limited configurati…
-
Unscored —CVE-2021-37748 Public exploit
Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.…
-
Unscored —
Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. …
-
Unscored —
An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux …
-
Unscored —
An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the ho…
-
Unscored —
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. …
-
Medium 5.4
Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
-
Medium 6.3
Cross-site Scripting (XSS) - Stored in getgrav/grav
grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
-
Medium 5.3CVE-2021-25219 EPSS 11%
Lame cache can be abused to severely degrade resolver performance
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authorita…
-
High 7.3
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
-
Low 3.5
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
-
Medium 4.7
Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker t…
-
Medium 5.5
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL po…
-
Medium 6.5
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for priv…
-
High 7.5
API giving out files without key
Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add `@…
-
Unscored —
CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.
-
High 8.6
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerabil…