# CVEs published 2021-10-31

11 CVEs were published on October 31, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2020-36379](https://cve.now/CVE-2020-36379.md): An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath… (no CVSS, aaptjs)
- [CVE-2020-36381](https://cve.now/CVE-2020-36381.md): An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath… (no CVSS, aaptjs)
- [CVE-2020-36380](https://cve.now/CVE-2020-36380.md): An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath… (no CVSS, aaptjs)
- [CVE-2020-36377](https://cve.now/CVE-2020-36377.md): An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath… (no CVSS, aaptjs)
- [CVE-2020-36378](https://cve.now/CVE-2020-36378.md): An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath… (no CVSS, aaptjs)
- [CVE-2020-36376](https://cve.now/CVE-2020-36376.md): An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath… (no CVSS, aaptjs)
- [CVE-2020-26707](https://cve.now/CVE-2020-26707.md): An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code via the filePath… (no CVSS)
- [CVE-2020-26705](https://cve.now/CVE-2020-26705.md): The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to… (no CVSS, easy-xml)
- [CVE-2021-33259](https://cve.now/CVE-2021-33259.md): Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users'… (no CVSS)
- [CVE-2020-25911](https://cve.now/CVE-2020-25911.md): A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an… (no CVSS, modx/revolution)
- [CVE-2020-25912](https://cve.now/CVE-2020-25912.md): A XML External Entity (XXE) vulnerability was discovered in symphony\\lib\\toolkit\\class.xmlelement.php in Symphony 2.7.10 which can lead to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2021-10-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.