CVEs published in October 2021

CVE-2021-36808Medium

local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version…

CVE-2021-41308Medium

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-41307High

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-41306High

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-41305High

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-41304Medium

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript

CVE-2021-30359High

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the…

CVE-2021-39127Medium

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint

CVE-2021-39126Medium

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources

CVE-2021-30358High

Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables

CVE-2021-25271Medium

local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318

CVE-2021-25270Medium

local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.