CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- fortinet fortiosAn improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS...3.5 Low
- fortinet fortiportalAn improper restriction of XML external entity reference vulnerability in the parser of XML...4.3 Medium
- fortinet fortiportalA concurrent execution using shared resource with improper Synchronization vulnerability ('Race...3.1 Low
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE)...7.1 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could...6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information...5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm infosphere information serverIBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to...5.4 Medium
- ibm infosphere information serverIBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has...5.9 Medium
- siren investigateIn Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert...9.8 Critical
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL...4.3 Medium
- realtek rtsupx usb utility driverRtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows...7.8 High
- realtek rtsupx usb utility driverRtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows...7.8 High
- realtek rtsupx usb utility driverRtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows...7.8 High
- realtek rtsupx usb utility driverRtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows...7.8 High
- couchbase serverCouchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The...7.5 High
- couchbase servermetakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote...7.5 High
- nsasoft spotauditorAn issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by...5.5 Medium
- elkarbackupCross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute...6.1 Medium
openscap-engine-sce-develAlmaLinuxopenscap bug fix and enhancement updateNo scorebrasero-develAlmaLinuxbrasero bug fix and enhancement updateNo scorebind-dyndb-ldapAlmaLinux,custodiaAlmaLinux,opendnssecAlmaLinux +9 more +11 moreidm:DL1 bug fix updateNo scorecockpit-podmanAlmaLinux,conmonAlmaLinux,containernetworking-pluginsAlmaLinux +8 more +10 morecontainer-tools:3.0 bug fix updateNo score- dynpgCross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to...5.4 Medium
- vaadin, vaadin vaadin-menu-bar +1 moreReflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 146.1 Medium
- phone shop sales management system project shop sales management systemPhone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to...9.8 Critical
NetworkManager-libnm-develAlmaLinuxNetworkManager bug fix and enhancement updateNo scorelibnfsidmap-develAlmaLinuxnfs-utils bug fix and enhancement updateNo scorebluez-libs-develAlmaLinuxbluez bug fix and enhancement updateNo score- validator project validator, validatorjs validatorjs/validator.js +1 moreInefficient Regular Expression Complexity in validatorjs/validator.js5.3 Medium
- publify project publify, publify core core +1 morePublify - Improper Authorization Leads to Guest Signup Restriction Bypass6.5 Medium
- naver whale browser, navercorp whale +1 moreWhale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an...5.3 Medium
- gnome glib, debian linux, netapp active iq unified manager +2 moreA flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...5.5 Medium
- atlassian jira server, jira data center, jira software data center +2 moreAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to...6.1 Medium
- dhis2 dhis 2, dhis2-core +1 moreSQL Injection in DHIS2 Tracker API8.1 High
- replicated classicAn open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could...6.1 Medium
- optinmonsterOptinMonster <= 2.6.4 Unprotected REST-API Endpoints8.2 High
- bracketspace notification, notification – custom notifications and alerts for wordpress – custom notifications and alerts for wordpress +1 moreNotification – Custom Notifications and Alerts for WordPress <= 7.2.4 Authenticated Stored Cross-Site Scripting4.8 Medium
- hashthemes demo importerHashthemes Demo Importer <= 1.1.1 Improper Access Control Allowing Content Deletion8.1 High
- nextscripts nextscripts: social networks auto-poster, social networks auto poster +1 moreNextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scripting6.1 Medium
- google maps easy maps easy, supsystic easy google maps +1 moreGoogle Maps Easy <= 1.9.33 Authenticated Stored Cross-Site Scripting4.8 Medium
- zohocorp manageengine log360ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability...9.8 Critical
- mcafee data loss prevention (dlp) epo extension, data loss prevention endpoint +1 moreData Loss Prevention (DLP) ePO extension - Cross site scripting (XSS)8.4 High
- mcafee data loss prevention (dlp) epo extension, data loss prevention endpoint +1 moreData Loss Prevention (DLP) ePO extension - SQL injection8.4 High
- doyocms project doyocmsArbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to...9.8 Critical
- doyocms project doyocmsSQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute...9.8 Critical
- s-cartS-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the...8.8 High
- pybbs project pybbsA SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access...7.5 High
- hp laserjet pro j8h60a firmware, laserjet pro j8h61a firmware +1 morePotential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that...9.8 Critical
- hp ilo amplifier packA remote unauthenticated directory traversal security vulnerability has been identified in HPE...9.8 Critical
- Show moreLoading…