# CVEs published 2021-10-31

11 CVEs were published on October 31, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2020-36379](https://cve.now/CVE-2020-36379.md): An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath paramet (no CVSS, aaptjs)
- [CVE-2020-36381](https://cve.now/CVE-2020-36381.md): An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath p (no CVSS, aaptjs)
- [CVE-2020-36380](https://cve.now/CVE-2020-36380.md): An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath paramet (no CVSS, aaptjs)
- [CVE-2020-36377](https://cve.now/CVE-2020-36377.md): An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameter (no CVSS, aaptjs)
- [CVE-2020-36378](https://cve.now/CVE-2020-36378.md): An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath par (no CVSS, aaptjs)
- [CVE-2020-36376](https://cve.now/CVE-2020-36376.md): An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameter (no CVSS, aaptjs)
- [CVE-2020-26707](https://cve.now/CVE-2020-26707.md): An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code via the filePath param (no CVSS)
- [CVE-2020-26705](https://cve.now/CVE-2020-26705.md): The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to exp (no CVSS, easy-xml)
- [CVE-2021-33259](https://cve.now/CVE-2021-33259.md): Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS (no CVSS)
- [CVE-2020-25911](https://cve.now/CVE-2020-25911.md): A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an infor (no CVSS, modx/revolution)
- [CVE-2020-25912](https://cve.now/CVE-2020-25912.md): A XML External Entity (XXE) vulnerability was discovered in symphony\\lib\\toolkit\\class.xmlelement.php in Symphony 2.7.10 which can lead to a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-10-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.