CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Critical
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreImproper input validation vulnerability in the WebManager CLUSTERPRO X 1.0 for Windows and later,...7.5 High
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreImproper input validation vulnerability in the Transaction Server CLUSTERPRO X 1.0 for Windows...7.5 High
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreBuffer overflow vulnerability in the Transaction Server CLUSTERPRO X 1.0 for Windows and later,...9.8 Critical
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreBuffer overflow vulnerability in the Disk Agent CLUSTERPRO X 1.0 for Windows and later,...9.8 Critical
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreImproper input validation vulnerability in the WebManager CLUSTERPRO X 1.0 for Windows and later,...7.5 High
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreBuffer overflow vulnerability in the compatible API with previous versions CLUSTERPRO X 1.0 for...9.8 Critical
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreBuffer overflow vulnerability in the Transaction Server CLUSTERPRO X 1.0 for Windows and later,...9.8 Critical
- nec clusterpro x, expresscluster x, clusterpro x singleserversafe +1 more +3 moreBuffer overflow vulnerability in the Disk Agent CLUSTERPRO X 1.0 for Windows and later,...9.8 Critical
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose()...4.7 Medium
- tenable nessusNessus versions 8.15.2 and earlier were found to contain a local privilege escalation...6.7 Medium
- the eclipse foundation eclipse paho mqtt c client, eclipse paho mqtt c\/c\+\+ client +1 moreIn versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len...9.8 Critical
- datalust seq.app.emailplusDatalust Seq.App.EmailPlus (aka seq-app-htmlemail) 3.1.0-dev-00148, 3.1.0-dev-00170, and 3.1.0...7.5 High
- google angleOut of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML...6.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +6 more +8 moreAn issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent...9.8 Critical
- maharaIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the...3.3 Low
- maharaIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS...5.4 Medium
- maharaIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export...7.3 High
- akka http serverUncontrolled Recursion in Akka HTTP7.5 High
- fortinet fortiadcA cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0...4.3 Medium
- fortinet forticlient, forticlientmac +1 moreAn improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0...3.2 Low
- fortinet fortiwlmA improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in...8.8 High
- fortinet fortiwlmA improper neutralization of special elements used in an OS command ('OS Command Injection') in...8.8 High
- fortinet forticlient, forticlientwindows +1 moreAn improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and...7.4 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5...8.8 High
- fortinet fortiwebA uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below,...5.3 Medium
- fortinet fortisiem, fortisiemwindowsagent +1 moreA unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...5.5 Medium
- fortinet fortisiem, fortisiemwindowsagent +1 moreA improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...7.8 High
- fortinet fortiportalA memory allocation with excessive size value vulnerability in the license verification function...4.3 Medium
- fortinet fortiportalMultiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal...6.1 Medium
- hangfireMissing Authorization with Default Settings in Dashboard UI8.6 High
- fortinet fortiportalMultiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal...6.5 Medium
- fortinet fortianalyzerA improper neutralization of input during web page generation ('cross-site scripting') in...4.1 Medium
- thunderdome planning poker, stevenweathers thunderdome-planning-poker +1 moreImproper Neutralization of Special Elements used in an LDAP Query8.1 High
- fortinet fortimanagerAn improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may...6.3 Medium
- fortinet forticlientems, forticlient enterprise management server +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and...4.1 Medium
- php-fusion phpfusionCross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP...9.6 Critical
- zibbs project zibbsCross site scripting (XSS) vulnerability in application/controllers/AdminController.php in...9.6 Critical
- zibbs project zibbsCross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute...9.6 Critical
- ayacms project ayacmsCross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an...8.8 High
- vtimecn 188jianzhanSQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and...9.8 Critical
- c-http project c-httpBuffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial...7.5 High
- image-processing project image-processingAn issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers...5.5 Medium
- gilcc project gilccBuffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit...7.5 High
- libiec iccp mod project iccp modBuffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a...7.5 High
- libiec iccp mod project iccp modBuffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a...7.5 High
- phpokBuffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to...9.8 Critical
- phpokAn issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in...9.1 Critical
- phpokDirectory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive...7.5 High
- Show moreLoading…