CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- nextcloud news, news-android +1 more Intent URI permissions manipulation in nextcloud news-android 5.8 Medium
- dell emc streaming data platform Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration... 8.1 High
- dell emc streaming data platform Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference... 6.5 Medium
- dell emc streaming data platform Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A... 8.8 High
- dell emc streaming data platform Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery... 5.3 Medium
- dell emc streaming data platform Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the... 6.5 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 more Improper Access Control in bookstackapp/bookstack 6.5 Medium
- concretecms concrete cms An issue was discovered in Concrete CMS before 8.5.7. The Dashboard allows a user's password to... 7.2 High
- cryptshare server An open redirect through HTML injection in confidential messages in Cryptshare before 5.1.0... 5.4 Medium
- actions-semi ats2815 firmware, ats2819 firmware, ats2819p firmware +2 more +4 more The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the... 6.5 Medium
- douzone neors douzone NeoRS remote support program ActiveX vulnerability 7.5 High
- zohocorp manageengine m365 manager plus Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution. 9.8 Critical
- zohocorp manageengine network configuration manager Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection... 9.8 Critical
- spring amqp, vmware spring advanced message queuing protocol +1 more Deserialization of Untrusted Data in Spring AMQP 6.5 Medium
- zohocorp manageengine supportcenter plus Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor. 7.5 High
- zohocorp manageengine supportcenter plus Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts... 6.1 Medium
- tobesoft nexacro, nexacro17 +1 more tobesoft Nexacro platform arbitrary file creation vulnerability 8.1 High
- zohocorp manageengine supportcenter plus Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products... 6.1 Medium
- efm networks & multimedia iptime c200 ip camera, iptime c200 firmware +1 more ipTIME C200 IP Camera command injection vulnerability 8.8 High
- govicture wr1200 firmware An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets... 7.8 High
- govicture wr1200 firmware An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection... 8.8 High
- govicture wr1200 firmware An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is... 6.5 Medium
- portswigger burp suite PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows has weak file permissions for... 6.5 Medium
- ibm mq appliance IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information... 5.9 Medium
- ibm mq appliance IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of... 5.1 Medium
- ibm mq appliance IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute... 8.2 High
- ibm mq appliance IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a... 5.1 Medium
- jetbrains teamcity In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases. 9.8 Critical
- hashicorp vault HashiCorp Vault Incorrect Permission Assignment for Critical Resource 6.5 Medium
- hexo Hexo - Stored XSS 5.0 Medium
- os4ed opensis A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as... 9.8 Critical
- os4ed opensis A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as... 9.8 Critical
- os4ed opensis A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as... 9.8 Critical
- business-dna solutions gmbh topease Insufficient Session Expiration in TopEase 8.1 High
- business-dna solutions gmbh topease Lack of Rate limiting in Authentication in TopEase 7.5 High
- business-dna solutions gmbh topease Missing Upload Filter in TopEase 7.3 High
- business-dna solutions gmbh topease Denial of Service via Invalid Object Attribute in TopEase 4.3 Medium
- business-dna solutions gmbh topease Denial of Service via Invalid Date Format in TopEase 4.3 Medium
- business-dna solutions gmbh topease Missing Character Length (Denial of Service) in TopEase 6.5 Medium
- business-dna solutions gmbh topease Stored XSS in Search Function in TopEase 7.3 High
- business-dna solutions gmbh topease Stored XSS in TopEase 8.1 High
- business-dna solutions gmbh topease UI Redressing in TopEase 3.5 Low
- business-dna solutions gmbh topease Unauthorized Menu Item Access in TopEase 4.3 Medium
- business-dna solutions gmbh topease Missing HTTPOnly flag on sensitive cookie in TopEase 8.1 High
- trend micro antivirus for mac 2021, trendmicro antivirus +1 more Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnerable to an improper access control... 7.8 High
- ohmyzsh ohmyzsh/ohmyzsh, planetargon oh my zsh +1 more OS Command Injection in ohmyzsh/ohmyzsh 7.5 High
- ohmyzsh ohmyzsh/ohmyzsh, planetargon oh my zsh +1 more OS Command Injection in ohmyzsh/ohmyzsh 7.5 High
- ohmyzsh ohmyzsh/ohmyzsh, planetargon oh my zsh +1 more OS Command Injection in ohmyzsh/ohmyzsh 7.5 High
- ohmyzsh ohmyzsh/ohmyzsh, planetargon oh my zsh +1 more OS Command Injection in ohmyzsh/ohmyzsh 7.5 High
-
suricataOSS-Fuzz Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem No score - Show olderLoading…