# CVEs published 2021-10-18

64 CVEs were published on October 18, 2021: 3 critical, 12 high. Days are UTC.

- [CVE-2021-41154](https://cve.now/CVE-2021-41154.md): SQL injection in the "SVN core" commits browser (CVSS 8.8, Enalean tuleap)
- [CVE-2021-41155](https://cve.now/CVE-2021-41155.md): SQL injection in CVS revisions browser (CVSS 8.8, Enalean tuleap)
- [CVE-2021-41156](https://cve.now/CVE-2021-41156.md): Reflected XSS vulnerability (CVSS 6.8, anuko timetracker)
- [CVE-2021-41153](https://cve.now/CVE-2021-41153.md): Specification non-compliance in JUMPI (CVSS 8.7, rust-blockchain evm · evm)
- [CVE-2021-41152](https://cve.now/CVE-2021-41152.md): Path Traversal in Folder Component Leading to Local File Inclusion (CVSS 7.7, OpenOLAT)
- [CVE-2021-42650](https://cve.now/CVE-2021-42650.md): Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates. (no CVSS)
- [CVE-2021-41151](https://cve.now/CVE-2021-41151.md): Path Traversal in @backstage/plugin-scaffolder-backend (CVSS 6.8, backstage · @backstage/plugin-scaffolder-backend)
- [CVE-2021-23449](https://cve.now/CVE-2021-23449.md): Sandbox Bypass (CVSS 9.8, vm2)
- [CVE-2021-29878](https://cve.now/CVE-2021-29878.md): IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Business Automation Workflow)
- [CVE-2021-42055](https://cve.now/CVE-2021-42055.md): ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker. (no CVSS)
- [CVE-2021-36513](https://cve.now/CVE-2021-36513.md): An issue was discovered in function sofia\_handle\_sip\_i\_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view (no CVSS)
- [CVE-2021-42575](https://cve.now/CVE-2021-42575.md): The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements. (no CVSS, com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sa…)
- [CVE-2021-42576](https://cve.now/CVE-2021-42576.md): The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated (no CVSS, pybluemonday · github.com/microcosm-cc/bluemonday)
- [CVE-2021-41971](https://cve.now/CVE-2021-41971.md): Possible SQL Injection when template processing is enabled (no CVSS, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2021-32609](https://cve.now/CVE-2021-32609.md): XSS vulnerability on Explore page (no CVSS, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2021-24760](https://cve.now/CVE-2021-24760.md): Gutenberg PDF Viewer Block \< 1.0.1 - Contributor+ Stored Cross-Site Scripting (no CVSS, Gutenberg PDF Viewer Block)
- [CVE-2021-24754](https://cve.now/CVE-2021-24754.md): MainWP Child Reports \< 2.0.8 - Admin+ SQL Injection (no CVSS, MainWP Child Reports)
- [CVE-2021-24752](https://cve.now/CVE-2021-24752.md): Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change (no CVSS, CatchThemes Essential Widgets · CatchThemes To Top +15)
- [CVE-2021-24743](https://cve.now/CVE-2021-24743.md): Podcast Subscribe Buttons \< 1.4.2 - Contributor+ Stored XSS (no CVSS, Podcast Subscribe Buttons)
- [CVE-2021-24740](https://cve.now/CVE-2021-24740.md): Tutor LMS \< 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting (no CVSS, Tutor LMS – eLearning and online course solution)
- [CVE-2021-24736](https://cve.now/CVE-2021-24736.md): Shared Files \< 1.6.57 - Admin+ Stored Cross-Site Scripting (no CVSS, Easy Download Manager and File Sharing Plugin with frontend…)
- [CVE-2021-24735](https://cve.now/CVE-2021-24735.md): Compact WP Audio Player \< 1.9.7 - Setting Change via CSRF (no CVSS, Compact WP Audio Player)
- [CVE-2021-24734](https://cve.now/CVE-2021-24734.md): Compact WP Audio Player \< 1.9.7 - Contributor+ Stored Cross-Site Scripting (no CVSS, Compact WP Audio Player)
- [CVE-2021-24732](https://cve.now/CVE-2021-24732.md): Dflip Lite \< 1.7.10 - Contributor+ Stored Cross-Site Scripting (no CVSS, PDF Flipbook, 3D Flipbook WordPress – DearFlip)
- [CVE-2021-24702](https://cve.now/CVE-2021-24702.md): LearnPress \< 4.1.3.1 - Multiple Admin+ Stored Cross-Site Scripting (no CVSS, LearnPress – WordPress LMS Plugin)
- [CVE-2021-24684](https://cve.now/CVE-2021-24684.md): PDF Light Viewer \< 1.4.12 - Authenticated Command Injection (no CVSS, WordPress PDF Light Viewer Plugin)
- [CVE-2021-24677](https://cve.now/CVE-2021-24677.md): Find My Blocks \< 3.4.0 - Private Post Titles Disclosure (no CVSS, Find My Blocks)
- [CVE-2021-24675](https://cve.now/CVE-2021-24675.md): One User Avatar \< 2.3.7 - Avatar Update via CSRF (no CVSS, One User Avatar | User Profile Picture)
- [CVE-2021-24672](https://cve.now/CVE-2021-24672.md): One User Avatar \< 2.3.7 - Contributor+ Stored Cross-Site Scripting (no CVSS, One User Avatar | User Profile Picture)
- [CVE-2021-24642](https://cve.now/CVE-2021-24642.md): Scroll Baner \<= 1.0 - CSRF to RCE (no CVSS, Scroll Baner)
- [CVE-2021-24622](https://cve.now/CVE-2021-24622.md): WP Ticket \< 5.10.4 - Admin+ Stored Cross-Site Scripting (no CVSS, Customer Service Software & Support Ticket System)
- [CVE-2021-24617](https://cve.now/CVE-2021-24617.md): GamePress \<= 1.1.0 - Reflected Cross-Site Scripting (no CVSS, GamePress – The Game Database Plugin)
- [CVE-2021-24615](https://cve.now/CVE-2021-24615.md): Wechat Reward \<= 1.7 - CSRF to Stored Cross-Site Scripting (no CVSS, 微信打赏（Wechat Reward))
- [CVE-2021-24612](https://cve.now/CVE-2021-24612.md): Sociable \<= 4.3.4.1 - Admin+ Stored Cross-Site Scripting (no CVSS, Sociable)
- [CVE-2021-24595](https://cve.now/CVE-2021-24595.md): WP Cookie Choice \<= 1.1.0 - CSRF to Stored Cross-Site Scripting (no CVSS, Wp Cookie Choice)
- [CVE-2021-24516](https://cve.now/CVE-2021-24516.md): PlanSo Forms \<= 2.6.3 - Authenticated Stored Cross-Site Scripting (no CVSS, PlanSo Forms)
- [CVE-2021-24416](https://cve.now/CVE-2021-24416.md): StreamCast \< 2.1.1 - Contributor+ Stored Cross-Site Scripting (no CVSS, StreamCast – Radio Player for WordPress)
- [CVE-2021-24415](https://cve.now/CVE-2021-24415.md): Polo Video Gallery \<= 1.2 - Contributor+ Stored Cross-Site Scripting (no CVSS, Polo Video Gallery – Best wordpress video gallery plugin)
- [CVE-2021-24413](https://cve.now/CVE-2021-24413.md): Easy Twitter Feed \< 1.2 - Contributor+ Stored Cross-Site Scripting (no CVSS, Easy Twitter Feed)
- [CVE-2021-24412](https://cve.now/CVE-2021-24412.md): Html5 Audio Player \< 2.1.3 - Contributor+ Stored Cross-Site Scripting (no CVSS, Html5 Audio Player – Audio Player for WordPress)
- [CVE-2021-41990](https://cve.now/CVE-2021-41990.md): The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. (no CVSS)
- [CVE-2021-41991](https://cve.now/CVE-2021-41991.md): The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certifi (no CVSS)
- [CVE-2021-42098](https://cve.now/CVE-2021-42098.md): An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via (no CVSS, Devolutions Remote Desktop Manager)
- [CVE-2020-8291](https://cve.now/CVE-2020-8291.md): A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks. (no CVSS, Rocket.Chat server)
- [CVE-2021-22961](https://cve.now/CVE-2021-22961.md): A code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that could lead to arbitrary code execution from a (no CVSS, GlassWire)
- [CVE-2021-21797](https://cve.now/CVE-2021-21797.md): An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. (CVSS 8.8, Nitro Pro)
- [CVE-2021-21796](https://cve.now/CVE-2021-21796.md): An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. (CVSS 8.8, Nitro Pro)
- [CVE-2021-38389](https://cve.now/CVE-2021-38389.md): Advantech WebAccess (CVSS 9.8, Advantech WebAccess)
- [CVE-2021-33023](https://cve.now/CVE-2021-33023.md): Advantech WebAccess (CVSS 9.8, Advantech WebAccess)
- [CVE-2021-38436](https://cve.now/CVE-2021-38436.md): FATEK Automation WinProladder (CVSS 7.8, FATEK Automation WinProladder)
- [CVE-2021-38438](https://cve.now/CVE-2021-38438.md): FATEK Automation WinProladder (CVSS 7.8, FATEK Automation WinProladder)
- [CVE-2021-38434](https://cve.now/CVE-2021-38434.md): FATEK Automation WinProladder (CVSS 7.8, FATEK Automation WinProladder)
- [CVE-2021-38440](https://cve.now/CVE-2021-38440.md): FATEK Automation WinProladder (CVSS 3.3, FATEK Automation WinProladder)
- [CVE-2021-38442](https://cve.now/CVE-2021-38442.md): FATEK Automation WinProladder (CVSS 7.8, FATEK Automation WinProladder)
- [CVE-2021-38426](https://cve.now/CVE-2021-38426.md): FATEK Automation WinProladder (CVSS 7.8, FATEK Automation WinProladder)
- [CVE-2021-38430](https://cve.now/CVE-2021-38430.md): FATEK Automation WinProladder (CVSS 7.8, FATEK Automation WinProladder)
- [CVE-2010-2496](https://cve.now/CVE-2010-2496.md): stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access t (no CVSS)
- [CVE-2021-41611](https://cve.now/CVE-2021-41611.md): An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. (no CVSS)
- [CVE-2021-38562](https://cve.now/CVE-2021-38562.md): Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a (no CVSS)
- [CVE-2021-42565](https://cve.now/CVE-2021-42565.md): myfactory.FMS before 7.1-912 allows XSS via the UID parameter. (no CVSS)
- [CVE-2021-42566](https://cve.now/CVE-2021-42566.md): myfactory.FMS before 7.1-912 allows XSS via the Error parameter. (no CVSS)
- [CVE-2021-36097](https://cve.now/CVE-2021-36097.md): Agents are able to lock the ticket without the "Owner" permission (CVSS 3.5, OTRS AG OTRS)
- [CVE-2021-22942](https://cve.now/CVE-2021-22942.md): A possible open redirect vulnerability in the Host Authorization middleware in Action Pack \>= 6.0.0 that could allow attackers to redirect u (no CVSS, https://github.com/rails/rails · actionpack)
- [CVE-2021-38297](https://cve.now/CVE-2021-38297.md): Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH (no CVSS, toolchain)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.