Week 43, 2021

25–31 October 2021

New CVEs: 346
Critical: 14
High: 56
Newly exploited: 0
Advisories: 106
Malicious pkgs: 0

Newly exploited 0

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

No newly exploited vulnerabilities were reported this week.

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2021-38294 Shell Command Injection Vulnerability in Nimbus Thrift Server
Apache Software Foundation · Apache Storm

EPSS 84%
Critical 9.8
CVE-2021-40865 Unsafe Pre-Authentication Deserialization In Workers
Apache Software Foundation · Apache Storm

EPSS 64%
Critical 9.8
CVE-2021-42343 Workers for local Dask clusters mistakenly listened on public interfaces
EPSS 3%
Critical 9.1
CVE-2020-25911 XML External Entity vulnerability in MODX CMS
EPSS 2.4%
Critical 9.8
CVE-2020-36380 Vulnerability in crunch function leads to arbitrary code execution via filePath parameters
EPSS 2.2%
Critical 9.8
CVE-2020-36379 Vulnerability in remove function leads to arbitrary code execution via filePath parameters
EPSS 1.9%
Critical 9.8
CVE-2020-36381 Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters
EPSS 1.9%
Critical 9.8
CVE-2020-36378 Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters
EPSS 1.9%
Critical 9.8
CVE-2020-36377 Vulnerability in dump function leads to arbitrary code execution via filePath parameters
EPSS 1.9%
Critical 9.8
CVE-2020-36376 Vulnerability in list function leads to arbitrary code execution via filePath parameters
EPSS 1.9%
Critical 9.1
CVE-2021-41194 Improper Access Control in jupyterhub-firstuseauthenticator
jupyterhub · firstuseauthenticator

EPSS 1.4%
Critical 9.1
CVE-2020-26705 XML External Entity vulnerability in Easy-XML
EPSS 1.3%
Critical 9.1
CVE-2021-34584 CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)
CODESYS · CODESYS V2

EPSS 1.1%
Critical 9.9
CVE-2021-38450 Trane Tracer Code Injection
Trane · Tracer SC · Tracer Concierge

EPSS 1%

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Unscored
CVE-2021-20837 Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (…
Six Apart · Movable Type

EPSS 88%
Unscored
CVE-2021-40344 An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as l…
EPSS 65%
Unscored
CVE-2021-30833 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to w…
Apple · macOS

EPSS 43%
Medium 6.5
CVE-2021-41184 XSS in the `of` option of the `.position()` util
jquery · jquery-ui

EPSS 41%
Medium 6.5
CVE-2021-41182 XSS in the `altField` option of the Datepicker widget
jquery · jquery-ui

EPSS 39%
Unscored
CVE-2021-40345 An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. A command injection (with…
EPSS 23%
High 7.5
CVE-2021-34586 CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
CODESYS · CODESYS V2

EPSS 14%
Medium 5.3
CVE-2021-25219 Lame cache can be abused to severely degrade resolver performance
ISC · BIND9

EPSS 11%

Advisories

openSUSE-SU-2021:3522-1 Security update for apache2 4 CVEs
SUSE-SU-2021:3522-1 Security update for apache2 4 CVEs
VDE-2021-041 Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability 1 CVEs