CVEs published October 15, 2021
59 CVEs were published on October 15, 2021: 4 critical, 11 high. 1 is now in CISA KEV.
- Published
- 59
- Critical
- 4
- High
- 11
- Medium
- 21
- Low
- 2
- Unrated
- 21
- Now in CISA KEV
- 1
- Fix available
- 7
Most affected products
- Aruba ClearPass Policy Manager
- 18
- Adobe Acrobat Reader
- 4
- Huachu Digital Technology Co. Easytest
- 4
- ShinHer Information Co. ShinHer StudyOnline System
- 4
- IBM Cognos Analytics
- 3
- Enalean tuleap
- 2
- Adobe Connect
- 1
- Adobe Magento Commerce · magento/community-edition +1
- 1
- Adobe Ops-CLI · ops-cli
- 1
- Adobe Reader Mobile
- 1
Critical 4
- CVE-2021-27561Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authenticati
- CVE-2021-40720Ops CLI Deserialization of Untrusted Data leads to Abritrary Code ExecutionAdobe Ops-CLI · ops-cli
- CVE-2021-38432FATEK Automation Communication ServerFATEK Automation Communication Server
- CVE-2021-3878Improper Restriction of XML External Entity Reference in stanfordnlp/corenlpstanfordnlp/corenlp · edu.stanford.nlp:stanford-corenlp
High 11
- CVE-2021-29679IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contIBM Cognos Analytics
- CVE-2021-40731Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-40728Adobe Acrobat Reader DC Use After Free Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-40724Adobe Acrobat Reader Android Abritrary Code Execution VulnerabilityAdobe Reader Mobile
- CVE-2021-41148The update of the CI job targeted by a widget is vulnerable to blind SQL injectionsEnalean tuleap
- CVE-2021-41147SQL injection in the planning edition panelEnalean tuleap
- CVE-2021-3881Out-of-bounds Read in bfabiszewski/libmobibfabiszewski/libmobi
- CVE-2021-3875Heap-based Buffer Overflow in vim/vimvim/vim
- CVE-2021-42334Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-2Huachu Digital Technology Co. Easytest
- CVE-2021-42333Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1Huachu Digital Technology Co. Easytest
- CVE-2021-42330ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-1ShinHer Information Co. ShinHer StudyOnline System
Medium, low and unrated 44
- CVE-2018-16061Mitsubishi Electric Europe B.V.
- CVE-2018-16060Mitsubishi Electric Europe B.V.
- CVE-2021-29745IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' pagIBM Cognos Analytics
- CVE-2020-4951IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive informatiIBM Cognos Analytics
- CVE-2021-41320A technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with higher privilege than the average authentica
- CVE-2021-40721Adobe Connect Reflected Cross Site ScriptingAdobe Connect
- CVE-2021-40730Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-40729Adobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information DisclosureAdobe Acrobat Reader
- CVE-2021-39864Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart AdditionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-40998A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-40997A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prAruba ClearPass Policy Manager
- CVE-2021-40995A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-40991A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy ManAruba ClearPass Policy Manager
- CVE-2021-40994A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-40993A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6Aruba ClearPass Policy Manager
- CVE-2021-40996A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prAruba ClearPass Policy Manager
- CVE-2021-40990A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy ManAruba ClearPass Policy Manager
- CVE-2021-40988A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prioAruba ClearPass Policy Manager
- CVE-2021-40989A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x pAruba ClearPass Policy Manager
- CVE-2021-3874Path Traversal in bookstackapp/bookstackbookstackapp/bookstack
- CVE-2021-40992A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6Aruba ClearPass Policy Manager
- CVE-2021-40986A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-37739A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-40987A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-37738A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy ManAruba ClearPass Policy Manager
- CVE-2021-37736A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prAruba ClearPass Policy Manager
- CVE-2021-37737A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6Aruba ClearPass Policy Manager
- CVE-2021-38431Advantech WebAccess SCADAAdvantech WebAccess SCADA
- CVE-2021-39349Author Bio Box <= 3.3.1 Authenticated Stored Cross-Site ScriptingAuthor Bio Box
- CVE-2021-39344KJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site ScriptingKJM Admin Notices
- CVE-2021-39335WpGenius Job Listing <= 1.0.2 Authenticated Stored Cross-Site ScriptingWpGenius Job Listing
- CVE-2021-39338MyBB Cross-Poster <= 1.0 Authenticated Stored Cross-Site ScriptingMyBB Cross-Poster
- CVE-2021-39345HAL <= 2.1.1 Authenticated Stored Cross-Site ScriptingHAL
- CVE-2021-39337job-portal <= 0.0.1 Authenticated Stored Cross-Site Scriptingjob-portal
- CVE-2021-39336Job Manager <= 0.7.25 Authenticated Stored Cross-Site ScriptingJob Manager
- CVE-2021-39334Job Board Vanila Plugin <= 1.0 Authenticated Stored Cross-Site ScriptingJob Board Vanila Plugin
- CVE-2021-39332Business Manager – WordPress ERP, HR, CRM, and Project Management Plugin <= 1.4.5 Authenticated Stored Cross-Site ScriptingBusiness Manager
- CVE-2021-42336Huachu Digital Technology Co.,Ltd. Easytest - Improper AuthorizationHuachu Digital Technology Co. Easytest
- CVE-2021-42335Huachu Digital Technology Co.,Ltd. Easytest - Stored XSSHuachu Digital Technology Co. Easytest
- CVE-2021-42332ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3ShinHer Information Co. ShinHer StudyOnline System
- CVE-2021-42331ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-2ShinHer Information Co. ShinHer StudyOnline System
- CVE-2021-42329ShinHer Information Co., LTD. ShinHer StudyOnline System - Stored XSSShinHer Information Co. ShinHer StudyOnline System
- CVE-2021-40999A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1Aruba ClearPass Policy Manager
- CVE-2021-28021Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.