CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- cisco prime access registrarCisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco cbs250-16p-2g firmware, cbs250-16t-2g firmware, cbs250-24fp-4g firmware +207 more +209 moreCisco Small Business Series Switches Session Credentials Replay Vulnerability8.1 High
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance Denial of Service Vulnerability7.5 High
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco umbrella, umbrella insights virtual appliance +1 moreCisco Umbrella Email Enumeration Vulnerability4.3 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability6.7 Medium
- cisco application extension platform, small business rv series router firmware, ios xr +2 moreCisco Small Business RV Series Routers Command Injection Vulnerability6.5 Medium
- cisco policy suite, policy suite (cps) software +1 moreCisco Policy Suite Static SSH Keys Vulnerability9.8 Critical
- cisco webex video mesh, collaboration meeting rooms +1 moreCisco Webex Video Mesh Cross-Site Scripting Vulnerability6.1 Medium
- cisco catalyst pon series, catalyst pon switch cgp-ont-1p firmware, catalyst pon switch cgp-ont-4p firmware +3 more +5 moreCisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities10.0 Critical
- cisco catalyst pon series, catalyst pon switch cgp-ont-1p firmware, catalyst pon switch cgp-ont-4p firmware +3 more +5 moreCisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities10.0 Critical
- cisco catalyst pon series, catalyst pon switch cgp-ont-1p firmware, catalyst pon switch cgp-ont-4p firmware +3 more +5 moreCisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities10.0 Critical
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Information Disclosure Vulnerability4.9 Medium
- cisco unified communications manager, unified communications manager im and presence service +1 moreCisco Unified Communications Products Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco webex meetingsCisco Webex Meetings Email Content Injection Vulnerability5.3 Medium
- cisco small business smart and managed switches, sf200-24 firmware, sf200-24fp firmware +64 more +66 moreCisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability5.3 Medium
- miniftpd project miniftpdA local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c...7.8 High
- dlink dir-823g firmwareA command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices...9.8 Critical
- dlink dir-823g firmwareAn issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows...9.1 Critical
- dlink dir-823g firmwareA command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices...9.8 Critical
- phoenix contact pc worx, phoenixcontact pc worx express +1 morePhoenix Contact: PC Worx/-Express prone to improper input validation vulnerability7.8 High
- beckhoff automation twincat opc ua server, beckhoff tf6100 firmware, ts6100 firmware +2 moreBeckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server6.5 Medium
libexifOSS-FuzzUNKNOWN READ in exif_mnote_data_canon_loadNo score- bluez, debian linux +1 moreAn issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a...9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical
- snow agent for windows, snowsoftware snow inventory agent +1 moreDeletion of arbitrary files vulnerability in Snow Agent for Windows6.1 Medium
- xenforoIn XenForo through 2.2.7, a threat actor with access to the admin panel can create a new...4.8 Medium
- ericsson network locationIn Ericsson Network Location MPS GMPC21, it is possible to inject commands via file_name in the...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...6.5 Medium
- broadcom emulex hba manager, one command manager +1 moreBroadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDu…9.8 Critical
- simple cashiering system project cashiering systemMultiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0...9.8 Critical
- kaspersky endpoint security, endpoint security for windows +1 morePossible system denial of service in case of arbitrary changing Firefox browser parameters. An...7.5 High
- alibaba druidIn Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory...7.5 High
- hp print and scan doctorHP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.7.8 High
- delta electronics dialinkDelta Electronics DIALink5.5 Medium
- delta electronics dialinkDelta Electronics DIALink7.8 High
- delta electronics dialinkDelta Electronics DIALink5.5 Medium
- delta electronics dialinkDelta Electronics DIALink7.8 High
- delta electronics dialinkDelta Electronics DIALink5.5 Medium
- delta electronics dialinkDelta Electronics DIALink5.9 Medium
- delta electronics dialinkDelta Electronics DIALink5.5 Medium
- delta electronics dialinkDelta Electronics DIALink7.8 High
- delta electronics dialinkDelta Electronics DIALink8.8 High
- delta electronics dialinkDelta Electronics DIALink5.5 Medium
- hp officejet 250 cz992a firmware, officejet 250c l9d57a firmware, officejet 252 n4l16c firmware +152 more +154 moreHP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition)...7.8 High
- oretnom23 simple subscription websiteCross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0...6.1 Medium
- oretnom23 simple subscription websiteSQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the...9.8 Critical
- grafanaXSS vulnerability allowing arbitrary JavaScript execution6.9 Medium
- Show moreLoading…