# CVEs published 2021-10-19

120 CVEs were published on October 19, 2021: 6 critical, 36 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-3454](https://cve.now/CVE-2021-3454.md): Truncated L2CAP K-frame causes assertion failure (CVSS 4.3, zephyrproject-rtos zephyr)
- [CVE-2021-3455](https://cve.now/CVE-2021-3455.md): Disconnecting L2CAP channel right after invalid ATT request leads freeze (CVSS 4.3, zephyrproject-rtos zephyr)
- [CVE-2021-41150](https://cve.now/CVE-2021-41150.md): Improper sanitization of delegated role names in tough (CVSS 8.2, awslabs tough · tough)
- [CVE-2021-31386](https://cve.now/CVE-2021-31386.md): Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2021-31385](https://cve.now/CVE-2021-31385.md): Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2021-31384](https://cve.now/CVE-2021-31384.md): Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service (CVSS 7.2, Juniper Networks Junos OS)
- [CVE-2021-31383](https://cve.now/CVE-2021-31383.md): Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31382](https://cve.now/CVE-2021-31382.md): Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31381](https://cve.now/CVE-2021-31381.md): SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files (CVSS 6.5, Juniper Networks SRC Series)
- [CVE-2021-31380](https://cve.now/CVE-2021-31380.md): SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information (CVSS 5.3, Juniper Networks SRC Series)
- [CVE-2021-31379](https://cve.now/CVE-2021-31379.md): Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31378](https://cve.now/CVE-2021-31378.md): Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state. (CVSS 6.8, Juniper Networks Junos OS)
- [CVE-2021-31377](https://cve.now/CVE-2021-31377.md): Junos OS: A local authenticated attacker can cause RPD to core (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2021-31376](https://cve.now/CVE-2021-31376.md): Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31375](https://cve.now/CVE-2021-31375.md): Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed (CVSS 7.2, Juniper Networks Junos OS)
- [CVE-2021-31374](https://cve.now/CVE-2021-31374.md): Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31373](https://cve.now/CVE-2021-31373.md): Junos OS: SRX Series: Persistent XSS vulnerability in J-Web (CVSS 8.0, Juniper Networks Junos OS)
- [CVE-2021-31372](https://cve.now/CVE-2021-31372.md): Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2021-31371](https://cve.now/CVE-2021-31371.md): Junos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2021-31370](https://cve.now/CVE-2021-31370.md): Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31369](https://cve.now/CVE-2021-31369.md): Junos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoS (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2021-31368](https://cve.now/CVE-2021-31368.md): Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31367](https://cve.now/CVE-2021-31367.md): Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31366](https://cve.now/CVE-2021-31366.md): Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31365](https://cve.now/CVE-2021-31365.md): Junos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31364](https://cve.now/CVE-2021-31364.md): Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2021-31363](https://cve.now/CVE-2021-31363.md): Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31362](https://cve.now/CVE-2021-31362.md): Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2021-31361](https://cve.now/CVE-2021-31361.md): Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2021-31360](https://cve.now/CVE-2021-31360.md): Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2021-31359](https://cve.now/CVE-2021-31359.md): Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability (CVSS 7.8, Juniper Networks Junos OS)
- [CVE-2021-31358](https://cve.now/CVE-2021-31358.md): Junos OS Evolved: shell-injection vulnerabilities in evo\_sftp UI wrapper script (CVSS 7.8, Juniper Networks Junos OS Evolved)
- [CVE-2021-31357](https://cve.now/CVE-2021-31357.md): Junos OS Evolved: shell-injection vulnerabilities in evo\_tcpdump UI wrapper script (CVSS 7.8, Juniper Networks Junos OS Evolved)
- [CVE-2021-31356](https://cve.now/CVE-2021-31356.md): Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts (CVSS 7.8, Juniper Networks Junos OS Evolved)
- [CVE-2021-31355](https://cve.now/CVE-2021-31355.md): Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal (CVSS 8.0, Juniper Networks Junos OS)
- [CVE-2021-31354](https://cve.now/CVE-2021-31354.md): Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE) (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2021-31353](https://cve.now/CVE-2021-31353.md): Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31352](https://cve.now/CVE-2021-31352.md): SRC Series: NETCONF over SSH allows negotiation of weak ciphers (CVSS 5.3, Juniper Networks SRC Series)
- [CVE-2021-31351](https://cve.now/CVE-2021-31351.md): Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31350](https://cve.now/CVE-2021-31350.md): Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET) (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-31349](https://cve.now/CVE-2021-31349.md): Session Smart Router: Authentication Bypass Vulnerability (CVSS 9.8, Juniper Networks 128 Technology Session Smart Router)
- [CVE-2021-0299](https://cve.now/CVE-2021-0299.md): Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2021-0298](https://cve.now/CVE-2021-0298.md): Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions (CVSS 4.7, Juniper Networks Junos OS Evolved)
- [CVE-2021-0297](https://cve.now/CVE-2021-0297.md): Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2021-0296](https://cve.now/CVE-2021-0296.md): CTPView: HSTS not being enforced on CTPView server. (CVSS 7.4, Juniper Networks CTPView)
- [CVE-2021-41140](https://cve.now/CVE-2021-41140.md): Reactions leak for secure category topics and private messages (CVSS 5.3, discourse-reactions)
- [CVE-2021-41149](https://cve.now/CVE-2021-41149.md): Improper sanitization of target names in tough (CVSS 8.2, awslabs tough · tough)
- [CVE-2021-41131](https://cve.now/CVE-2021-41131.md): Client metadata path-traversal in python-tuf (CVSS 7.5, theupdateframework python-tuf · tuf)
- [CVE-2021-32664](https://cve.now/CVE-2021-32664.md): Reflected XSS in Combodo/iTop (CVSS 8.1, Combodo iTop)
- [CVE-2021-32663](https://cve.now/CVE-2021-32663.md): Unauthorized setup leads to SSRF in Combodo/iTop (CVSS 8.7, Combodo iTop)
- [CVE-2021-35323](https://cve.now/CVE-2021-35323.md): Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login. (no CVSS)
- [CVE-2021-33988](https://cve.now/CVE-2021-33988.md): Cross Site Scripting (XSS). (no CVSS, microweber/microweber)
- [CVE-2020-12141](https://cve.now/CVE-2020-12141.md): An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclo (no CVSS)
- [CVE-2021-38911](https://cve.now/CVE-2021-38911.md): IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged us (CVSS 4.4, IBM Cloud Pak for Security)
- [CVE-2021-29912](https://cve.now/CVE-2021-29912.md): IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Security)
- [CVE-2021-39355](https://cve.now/CVE-2021-39355.md): Indeed Job Importer \<= 1.0.5 Authenticated Stored Cross-Site Scripting (CVSS 5.5, Indeed Job Importer)
- [CVE-2021-39343](https://cve.now/CVE-2021-39343.md): MPL-Publisher – Self-publish your book & ebook \<= 1.30.2 Authenticated Stored Cross-Site Scripting (CVSS 5.5, MPL-Publisher)
- [CVE-2021-39329](https://cve.now/CVE-2021-39329.md): JobBoardWP – Job Board Listings and Submissions \<= 1.0.7 Authenticated Stored Cross-Site Scripting (CVSS 5.5, JobBoardWP)
- [CVE-2021-36832](https://cve.now/CVE-2021-36832.md): WordPress Icegram plugin \<= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Popups, Welcome Bar, Optins and Lead Generation Plugin – Ic…)
- [CVE-2021-27001](https://cve.now/CVE-2021-27001.md): Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an (no CVSS, Clustered Data ONTAP)
- [CVE-2021-26589](https://cve.now/CVE-2021-26589.md): A potential security vulnerability has been identified in HPE Superdome Flex Servers. (no CVSS, HPE Superdome Flex Server)
- [CVE-2011-1075](https://cve.now/CVE-2011-1075.md): FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new v (no CVSS, FreeBSD/crontab)
- [CVE-2021-3746](https://cve.now/CVE-2021-3746.md): A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. (no CVSS, libtpms)
- [CVE-2021-30358](https://cve.now/CVE-2021-30358.md): Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from oth (no CVSS, Check Point Mobile Access Portal Agent)
- [CVE-2011-1497](https://cve.now/CVE-2011-1497.md): A cross-site scripting vulnerability flaw was found in the auto\_link function in Rails before version 3.0.6. (no CVSS, rails · actionpack)
- [CVE-2020-29622](https://cve.now/CVE-2020-29622.md): A race condition was addressed with additional validation. (no CVSS, Apple Security Update - Catalina)
- [CVE-2021-30811](https://cve.now/CVE-2021-30811.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2021-30815](https://cve.now/CVE-2021-30815.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30820](https://cve.now/CVE-2021-30820.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30810](https://cve.now/CVE-2021-30810.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30825](https://cve.now/CVE-2021-30825.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30819](https://cve.now/CVE-2021-30819.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30807](https://cve.now/CVE-2021-30807.md): A memory corruption issue was addressed with improved memory handling. (CVSS 7.8, KEV, Apple macOS)
- [CVE-2021-30826](https://cve.now/CVE-2021-30826.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30827](https://cve.now/CVE-2021-30827.md): A permissions issue existed. (no CVSS, Apple macOS)
- [CVE-2021-30829](https://cve.now/CVE-2021-30829.md): A URI parsing issue was addressed with improved parsing. (no CVSS, Apple macOS)
- [CVE-2021-30828](https://cve.now/CVE-2021-30828.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30830](https://cve.now/CVE-2021-30830.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2021-30832](https://cve.now/CVE-2021-30832.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30837](https://cve.now/CVE-2021-30837.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30835](https://cve.now/CVE-2021-30835.md): This issue was addressed with improved checks. (no CVSS, Apple Security Update - Catalina · Apple iOS and iPadOS +3)
- [CVE-2021-30842](https://cve.now/CVE-2021-30842.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30838](https://cve.now/CVE-2021-30838.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30841](https://cve.now/CVE-2021-30841.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30844](https://cve.now/CVE-2021-30844.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30845](https://cve.now/CVE-2021-30845.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30843](https://cve.now/CVE-2021-30843.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30847](https://cve.now/CVE-2021-30847.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30846](https://cve.now/CVE-2021-30846.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30848](https://cve.now/CVE-2021-30848.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple Safari)
- [CVE-2021-30850](https://cve.now/CVE-2021-30850.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2021-30849](https://cve.now/CVE-2021-30849.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2021-3889](https://cve.now/CVE-2021-3889.md): Use of Out-of-range Pointer Offset in bfabiszewski/libmobi (CVSS 7.1, bfabiszewski/libmobi)
- [CVE-2021-3888](https://cve.now/CVE-2021-3888.md): Use of Out-of-range Pointer Offset in bfabiszewski/libmobi (CVSS 7.1, bfabiszewski/libmobi)
- [CVE-2021-3879](https://cve.now/CVE-2021-3879.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 6.8, snipe/snipe-it)
- [CVE-2021-3872](https://cve.now/CVE-2021-3872.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2021-3869](https://cve.now/CVE-2021-3869.md): Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp (CVSS 8.6, stanfordnlp/corenlp · edu.stanford.nlp:stanford-corenlp)
- [CVE-2021-3863](https://cve.now/CVE-2021-3863.md): Cross-site Scripting (XSS) - Generic in snipe/snipe-it (CVSS 5.5, snipe/snipe-it)
- [CVE-2021-3858](https://cve.now/CVE-2021-3858.md): Cross-Site Request Forgery (CSRF) in snipe/snipe-it (CVSS 4.3, snipe/snipe-it)
- [CVE-2021-3851](https://cve.now/CVE-2021-3851.md): Open Redirect in firefly-iii/firefly-iii (CVSS 5.0, firefly-iii/firefly-iii · grumpydictator/firefly-iii)
- [CVE-2021-3846](https://cve.now/CVE-2021-3846.md): Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii (CVSS 6.3, firefly-iii/firefly-iii · grumpydictator/firefly-iii)
- [CVE-2021-38486](https://cve.now/CVE-2021-38486.md): InHand Networks IR615 Router (CVSS 8.0, InHand Networks IR615 Router)
- [CVE-2021-38478](https://cve.now/CVE-2021-38478.md): InHand Networks IR615 Router (CVSS 9.1, InHand Networks IR615 Router)
- [CVE-2021-38480](https://cve.now/CVE-2021-38480.md): InHand Networks IR615 Router (CVSS 9.6, InHand Networks IR615 Router)
- [CVE-2021-38484](https://cve.now/CVE-2021-38484.md): InHand Networks IR615 Router (CVSS 9.1, InHand Networks IR615 Router)
- [CVE-2021-38482](https://cve.now/CVE-2021-38482.md): InHand Networks IR615 Router (CVSS 8.7, InHand Networks IR615 Router)
- [CVE-2021-38472](https://cve.now/CVE-2021-38472.md): InHand Networks IR615 Router (CVSS 4.7, InHand Networks IR615 Router)
- [CVE-2021-38476](https://cve.now/CVE-2021-38476.md): InHand Networks IR615 Router (CVSS 6.5, InHand Networks IR615 Router)
- [CVE-2021-38462](https://cve.now/CVE-2021-38462.md): InHand Networks IR615 Router (CVSS 9.8, InHand Networks IR615 Router)
- [CVE-2021-38466](https://cve.now/CVE-2021-38466.md): InHand Networks IR615 Router (CVSS 8.8, InHand Networks IR615 Router)
- [CVE-2021-38464](https://cve.now/CVE-2021-38464.md): InHand Networks IR615 Router (CVSS 6.4, InHand Networks IR615 Router)
- [CVE-2021-38468](https://cve.now/CVE-2021-38468.md): InHand Networks IR615 Router (CVSS 8.7, InHand Networks IR615 Router)
- [CVE-2021-38470](https://cve.now/CVE-2021-38470.md): InHand Networks IR615 Router (CVSS 9.1, InHand Networks IR615 Router)
- [CVE-2021-38474](https://cve.now/CVE-2021-38474.md): InHand Networks IR615 Router (CVSS 6.3, InHand Networks IR615 Router)
- [CVE-2021-36512](https://cve.now/CVE-2021-36512.md): An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS, which may allow attackers to view sensitive inf (no CVSS)
- [CVE-2021-42261](https://cve.now/CVE-2021-42261.md): Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. (no CVSS)
- [CVE-2021-25968](https://cve.now/CVE-2021-25968.md): OpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap (CVSS 5.4, org.opencms opencms-core)
- [CVE-2021-20836](https://cve.now/CVE-2021-20836.md): Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause informa (no CVSS, OMRON CX-Supervisor)
- [CVE-2021-37136](https://cve.now/CVE-2021-37136.md): The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocati (no CVSS, The Netty project Netty · io.netty:netty-codec +2)
- [CVE-2021-37137](https://cve.now/CVE-2021-37137.md): The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. (no CVSS, The Netty project Netty · io.netty:netty-codec +2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.