CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- php-cms project php-cmsPHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php...7.5 High
- ed01-cms project ed01-cmsED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid...9.8 Critical
- ed01-cms project ed01-cmsAn arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows...9.8 Critical
- ed01-cms project ed01-cmsED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in...6.1 Medium
- jupyter nbdime, nbdime-jupyterlab +1 moreStored XSS in Jupyter nbdime8.7 High
- antillesAntilles Dependency Confusion Vulnerability8.8 High
num-bigintcrates.ioUnexpected panics in num-bigintNo score- bootstrap-table bootstrap tableCross-site Scripting (XSS)3.1 Low
- tempura project tempuraCross-site Scripting (XSS)5.4 Medium
- json-ptr project json-ptrPrototype Pollution5.6 Medium
- janl jsonpointerPrototype Pollution5.6 Medium
- dotty project dottyPrototype Pollution5.6 Medium
- manuelstofer json-pointerPrototype Pollution5.6 Medium
- text2pdf project text2pdfAn issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows...7.8 High
- linux network project network projectBuffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to...9.8 Critical
- htmldoc project htmldoc, debian linux +1 moreBuffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of...5.5 Medium
- eyoucmsSQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and...9.8 Critical
- libxls project libxls, fedoraproject fedora +1 moreAn issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows...6.5 Medium
- zohocorp manageengine applications managerAn issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows...9.8 Critical
- wdja cmsCross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute...9.6 Critical
- playtuber project playtuberAn issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated...8.8 High
- struktur libheifBuffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in...8.1 High
- chamilo lmsChamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form,...6.1 Medium
- apache traffic serverheap-buffer-overflow with stats-over-http plugin9.8 Critical
- apache traffic serverATS stops accepting connections on FreeBSD7.5 High
- apache traffic server, debian linux +1 moreNot validating origin TLS certificate8.1 High
- apache traffic server, debian linux +1 moreRequest Smuggling - multiple attacks7.5 High
- apache traffic server, debian linux +1 moreRequest Smuggling - transfer encoding validation7.5 High
- apache traffic server, debian linux +1 moreRequest Smuggling - LF line ending7.5 High
- customer relationship management system project relationship management systemAn SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System ...9.8 Critical
- librenmsCross-site Scripting in LibreNMS6.1 Medium
- artica pandora fmsWith an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the...6.7 Medium
- artica pandora fmsPandora FMS through 755 allows XSS via a new Event Filter with a crafted name.5.4 Medium
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...5.2 Medium
- maharaIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web...9.8 Critical
- maharaIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain...7.8 High
- fimer aurora visionAn issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login...5.3 Medium
- fimer aurora visionAn issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI)...4.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had...7.5 High
- insyde insydeh2o uefi biosAn issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel...9.8 Critical
- hp futuresmart 3, futuresmart 4, futuresmart 5 +2 moreCertain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be...4.6 Medium
- hp futuresmart 3, futuresmart 4, futuresmart 5 +2 moreCertain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed...9.8 Critical
- mozilla firefox, firefox mobile +1 moreFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...8.1 High
freeradiusOSS-FuzzGlobal-buffer-overflow in fr_unix_time_from_tmNo scoredlplibsOSS-FuzzHeap-buffer-overflow in Canvas5Structure::NIBDecoder::decodeNo scorelibexifOSS-FuzzHeap-buffer-overflow in exif_data_load_data_contentNo score- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy displaying a form validity message in the correct location at the same time as a permission...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 Medium
- Show moreLoading…