CVEs published October 28, 2021
105 CVEs were published on October 28, 2021: 1 critical, 5 high.
- Published
- 105
- Critical
- 1
- High
- 5
- Medium
- 1
- Low
- 0
- Unrated
- 98
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- Huawei EMUI · Huawei Magic UI
- 38
- Huawei HarmonyOS
- 22
- Apple macOS
- 8
- Apple iOS and iPadOS · Apple tvOS +1
- 5
- Apple iOS and iPadOS · Apple tvOS +2
- 3
- ABB PCM600 · Hitachi Energy PCM600
- 1
- Apple iOS and iPadOS
- 1
- Apple iOS and iPadOS · Apple macOS
- 1
- Apple iOS and iPadOS · Apple tvOS +3
- 1
- Bitdefender Endpoint Security Tools · Bitdefender Total Sec…
- 1
Critical 1
High 5
- CVE-2021-3745Unrestricted Upload of File with Dangerous Type in flatcore/flatcore-cmsflatcore/flatcore-cms
- CVE-2020-7875RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerabilityRAONWIZ DEXT5 Upload
- CVE-2021-3823Path traversal vulnerability in Bitdefender GravitZone Update Server in relay modeBitdefender GravityZone Update Server
- CVE-2021-3576Privilege escalation via SeImpersonatePrivilegeBitdefender Endpoint Security Tools · Bitdefender Total Sec…
- CVE-2021-3579Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exeBitdefender ENdpoint Security Tools for Windows · Bitdefend…
Medium, low and unrated 99
- CVE-2020-23549IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Da
- CVE-2020-23546IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Dat
- CVE-2021-36551TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php.
- CVE-2021-36550TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php.
- CVE-2021-36547A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitra
- CVE-2021-36548A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4
- CVE-2020-25422A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a c
- CVE-2021-30834A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30836An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30833This issue was addressed with improved checks.Apple macOS
- CVE-2021-30840This issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30821A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2021-30824A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2021-30817A permissions issue was addressed with improved validation.Apple macOS
- CVE-2021-30831An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30823A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2021-30814A memory corruption issue was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30816The issue was addressed with improved permissions logic.Apple iOS and iPadOS
- CVE-2021-30818A type confusion issue was addressed with improved state handling.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30808This issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30809A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1821A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30813This issue was addressed with improved checks.Apple macOS
- CVE-2020-29629An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2020-9897An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-22097In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a bodySpring AMQP · org.springframework.amqp:spring-amqp
- CVE-2021-22096In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious Spring Framework · org.springframework:spring-core +1
- CVE-2021-22047In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllersSpring Data REST · org.springframework.data:spring-data-res…
- CVE-2021-22044In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@ReSpring Cloud OpenFeign · org.springframework.cloud:spring-c…
- CVE-2021-41728Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.
- CVE-2020-22312A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0.
- CVE-2021-37254In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated acce
- CVE-2021-22278Certificate verification vulnerability in Update Manager of PCM600 Engineering ToolABB PCM600 · Hitachi Energy PCM600
- CVE-2021-22471A component of the HarmonyOS has a NULL Pointer Dereference vulnerability.Huawei HarmonyOS
- CVE-2021-22464A component of the HarmonyOS has a Out-of-bounds Read vulnerability.Huawei HarmonyOS
- CVE-2021-22461A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability.Huawei HarmonyOS
- CVE-2021-22453A component of the HarmonyOS has a Improper Input Validation vulnerability.Huawei HarmonyOS
- CVE-2021-22467A component of the HarmonyOS has a Improper Input Validation vulnerability.Huawei HarmonyOS
- CVE-2021-22458A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability.Huawei HarmonyOS
- CVE-2021-22454A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability.Huawei HarmonyOS
- CVE-2021-22469A component of the HarmonyOS has a Out-of-bounds Read vulnerability.Huawei HarmonyOS
- CVE-2021-22468A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Huawei HarmonyOS
- CVE-2021-22466A component of the HarmonyOS has a Use After Free vulnerability.Huawei HarmonyOS
- CVE-2021-22463A component of the HarmonyOS has a Use After Free vulnerability .Huawei HarmonyOS
- CVE-2021-22462A component of the HarmonyOS has a NULL Pointer Dereference vulnerability.Huawei HarmonyOS
- CVE-2021-22455A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability.Huawei HarmonyOS
- CVE-2021-22452A component of the HarmonyOS has a Improper Input Validation vulnerability.Huawei HarmonyOS
- CVE-2021-22465A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability.Huawei HarmonyOS
- CVE-2021-22456A component of the HarmonyOS has a Data Processing Errors vulnerability.Huawei HarmonyOS
- CVE-2021-22450A component of the HarmonyOS has a Incomplete Cleanup vulnerability.Huawei HarmonyOS
- CVE-2021-22470A component of the HarmonyOS has a Privileges Controls vulnerability.Huawei HarmonyOS
- CVE-2021-22460A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability.Huawei HarmonyOS
- CVE-2021-22459A component of the HarmonyOS has a NULL Pointer Dereference vulnerability.Huawei HarmonyOS
- CVE-2021-22457A component of the HarmonyOS has a Improper Input Validation vulnerability.Huawei HarmonyOS
- CVE-2021-22451A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability.Huawei HarmonyOS
- CVE-2021-37002There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious Huawei EMUI · Huawei Magic UI
- CVE-2021-37001There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value Huawei EMUI · Huawei Magic UI
- CVE-2021-36999There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and Huawei EMUI · Huawei Magic UI
- CVE-2021-36998There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to reaHuawei EMUI · Huawei Magic UI
- CVE-2021-36997There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerabilHuawei EMUI · Huawei Magic UI
- CVE-2021-36996There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission ofHuawei EMUI · Huawei Magic UI
- CVE-2021-36995There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft linkHuawei EMUI · Huawei Magic UI
- CVE-2021-36994There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions.Huawei EMUI · Huawei Magic UI
- CVE-2021-36993There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.Huawei EMUI · Huawei Magic UI
- CVE-2021-36992There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confiHuawei EMUI · Huawei Magic UI
- CVE-2021-36991There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulHuawei EMUI · Huawei Magic UI
- CVE-2021-36990There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisHuawei EMUI · Huawei Magic UI
- CVE-2021-36989There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.Huawei EMUI · Huawei Magic UI
- CVE-2021-36988There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.Huawei EMUI · Huawei Magic UI
- CVE-2021-36987There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions.Huawei EMUI · Huawei Magic UI
- CVE-2021-36986There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisHuawei EMUI · Huawei Magic UI
- CVE-2021-36985There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and Huawei EMUI · Huawei Magic UI
- CVE-2021-22491There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabilHuawei EMUI · Huawei Magic UI
- CVE-2021-22490There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device peHuawei EMUI · Huawei Magic UI
- CVE-2021-22488There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft linkHuawei EMUI · Huawei Magic UI
- CVE-2021-22487There is an Out-of-bounds read vulnerability in Huawei Smartphone.Huawei EMUI · Huawei Magic UI
- CVE-2021-22486There is a issue of Unstandardized field names in Huawei Smartphone.Huawei EMUI · Huawei Magic UI
- CVE-2021-22485There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerability may affect servHuawei EMUI · Huawei Magic UI
- CVE-2021-22483There is a issue of IP address spoofing in Huawei Smartphone.Huawei EMUI · Huawei Magic UI
- CVE-2021-22475There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serviHuawei EMUI · Huawei Magic UI
- CVE-2021-22474There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.Huawei EMUI · Huawei Magic UI
- CVE-2021-22473There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentialiHuawei EMUI · Huawei Magic UI
- CVE-2021-22472There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidHuawei EMUI · Huawei Magic UI
- CVE-2021-22407There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.Huawei EMUI · Huawei Magic UI
- CVE-2021-22406There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit uHuawei EMUI · Huawei Magic UI
- CVE-2021-22405There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.Huawei EMUI · Huawei Magic UI
- CVE-2021-22404There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentHuawei EMUI · Huawei Magic UI
- CVE-2021-22403There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attaHuawei EMUI · Huawei Magic UI
- CVE-2021-22402There is a DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS attacks.Huawei EMUI · Huawei Magic UI
- CVE-2021-22401There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.Huawei EMUI · Huawei Magic UI
- CVE-2021-22482There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission oHuawei EMUI · Huawei Magic UI
- CVE-2021-22481There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentHuawei EMUI · Huawei Magic UI
- CVE-2021-22436There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and avHuawei EMUI · Huawei Magic UI
- CVE-2021-37915An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8.
- CVE-2021-37748Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authe
- CVE-2019-19810Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service.
- CVE-2021-43057An issue was discovered in the Linux kernel before 5.14.8.
- CVE-2021-43056An issue was discovered in the Linux kernel for powerpc before 5.14.15.
- CVE-2020-10005A resource exhaustion issue was addressed with improved input validation.Apple macOS