CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- hpe proliant dl20 gen10 server firmware, proliant microserver gen10 plus firmware, proliant ml30 gen10 server firmware +2 moreA potential local bypass of security restrictions vulnerability has been identified in HPE...6.7 Medium
- netapp ontap system managerClustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are...7.5 High
- hp laserjet pro j8h60a firmware, laserjet pro j8h61a firmware +1 morePotential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that...7.5 High
- hp smartHP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially...7.8 High
- google libjxlOut of bounds Copy in Libjxl in large image groups4.5 Medium
- google libjxlMemory Overread in libjxl4.5 Medium
- netapp ontap system managerSystem Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to...5.5 Medium
- youphptubeAVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting...6.1 Medium
- youphptubeAVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged...7.2 High
- youphptubeAVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities...6.1 Medium
- youphptubeAVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting...6.1 Medium
- youphptubeAVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection...7.5 High
- jeedomIn Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users...7.5 High
- apache dolphinschedulerDolphinScheduler mysql jdbc connector parameters deserialize remote code execution8.8 High
- e-dynamics events made easyEvents Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown bp better messages, wordplus better messages +1 moreBP Better Messages < 1.9.9.41 - Multiple CSRF8.8 High
- unknown bp better messages, wordplus better messages +1 moreBP Better Messages < 1.9.9.41 - Reflected Cross-Site Scripting6.1 Medium
- tipsandtricks-hq far future expiry headerFar Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF4.3 Medium
- connections-pro connections business directoryConnections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site Scripting4.8 Medium
- flat preloader project preloader, unknown flat preloader +1 moreFlat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- imagesourcecontrol image source controlImage Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change4.3 Medium
- unknown wordpress download manager, w3eden download manager +1 moreWordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting4.8 Medium
- design stylish price listStylish Price List < 6.9.1 - Subscriber+ Arbitrary Image Upload6.5 Medium
- design stylish price listStylish Price List < 6.9.0 - Unauthenticated Arbitrary Image Upload5.3 Medium
- radiustheme logo slider and showcaseLogo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update6.5 Medium
- unknown wp reactions lite, wp reactions, llc reactions lite +1 moreWP Reactions Lite < 1.3.6 - Authenticated Stored Cross Site Scripting5.4 Medium
- jetmonsters restaurant menu by motopress, motopress restaurant menu +1 moreRestaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site Scripting4.8 Medium
- automatorwpAutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation8.8 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting5.4 Medium
- unknown wp sitemap page, wp sitemap page project sitemap page +1 moreWP Sitemap Page < 1.7.0 - Admin+ Stored Cross Site Scripting4.8 Medium
- flat preloader project preloader, unknown flat preloader +1 moreFlat Preloader < 1.5.4 - CSRF to Stored Cross-Site Scripting5.4 Medium
- unknown cool tag cloudCool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 moreMP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting4.8 Medium
- scott paterson accept donations with paypalPaypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion4.3 Medium
- scott paterson accept donations with paypalPaypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting4.3 Medium
- dazzlersoft coming soon, under construction & maintenance mode by dazzler, dazzlersoftware coming soon\, under construction \& maintenance mode by dazzler +1 moreComing Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- delete all comments easily project all comments easily, unknown delete all comments easily +1 moreDelete All Comments Easily <= 1.3 - All Comments Deletion via CSRF6.5 Medium
- unknown wp-pro-quizWP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF6.5 Medium
- connections-pro connections business directoryConnections Business Directory < 9.7 - Admin+ CSV Injection8.0 High
- learndash, stellarwp learndash lms +1 moreLearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload7.5 High
- unknown wp attachment export, wp attachment export project attachment export +1 moreWP Attachment Export < 0.2.4 - Unauthenticated Posts Download7.5 High
- content text slider on post project text slider on post, unknown content text slider on post +1 moreContent text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- unknown wp-statsWP-Stats < 2.5.2 - CSRF to Stored Cross-Site Scripting (XSS)4.3 Medium
- apache mina, oracle banking payments, banking trade finance process management +6 more +8 moreApache MINA HTTP listener DOS6.5 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin...4.3 Medium
- antenna house, inc. office server document converterOffice Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote...6.5 Medium
- antenna house, inc. office server document converterOffice Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote...7.5 High
harfbuzzOSS-FuzzUNKNOWN READ in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_cNo scoreassimpOSS-FuzzContainer-overflow in m3d_loadNo score- Show moreLoading…