CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to...5.7 Medium
- google android, samsung mobile devices +1 moreA missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to...7.2 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vim7.3 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.3 High
- udisks project udisks, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...4.2 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreOWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is...9.8 Critical
- gitlabIn all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook...3.7 Low
- gitlabAn information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user...4.3 Medium
- gitlabAn improper access control flaw in GitLab CE/EE since version 13.9 exposes private email address...1.7 Low
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The...5.3 Medium
- gitlabAn Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1...4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to...6.0 Medium
- gitlabA stored Cross-Site Scripting vulnerability in the DataDog integration in GitLab CE/EE version 13...7.7 High
- gitlabIn all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token...2.7 Low
- gitlabAccidental logging of system root password in the migration log in all versions of GitLab CE/EE...4.4 Medium
- gitlabImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with...2.6 Low
- gitlabA potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a...5.3 Medium
- gitlabImproper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to...8.7 High
- gitlabLack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab...5.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can...6.5 Medium
- gitlabIncorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a...4.3 Medium
- gitlabA regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3...3.1 Low
- obsidian dataviewObsidian Dataview vulnerable to code injection due to unsafe eval7.8 High
- graphql graphiqlXSS vulnerability in GraphiQL7.1 High
- cryptopp crypto\+\+Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is...5.3 Medium
- graphql graphql-playground, playground +1 moreXSS vulnerability in GraphQL Playground7.1 High
- gnu glibc, oracle communications cloud native core binding support function, communications cloud native core network function cloud native environment +7 more +9 moreIn iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force...7.5 High
- ec cloud e-commerce system project cloud e-commerce systemEC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF)...6.5 Medium
- debian linux, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreAn issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds...5.5 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to...4.3 Medium
- mybbMyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management module does not validate setting types correctly on insertion…7.2 High
- jupyter jupyterhubincomplete logout in JupyterHub3.5 Low
- jenkins subversion, jenkins project subversion plugin +1 morePath traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files7.5 High
- jenkinsAgent-to-controller access control allows reading/writing most content of build directories in Jenkins9.1 Critical
- jenkinsAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.8 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins7.5 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.1 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 Critical
rcnpmEmbedded malware in rcNo scorecoanpmEmbedded malware in coaNo score- mozilla thunderbirdThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...9.8 Critical
- cisco webex video mesh, collaboration meeting rooms +1 moreCisco Webex Video Mesh Arbitrary Site Redirection Vulnerability5.4 Medium
- cisco unity connection, unified communications manager, unified communications manager im and presence service +2 moreCisco Unified Communications Products Path Traversal Vulnerability4.3 Medium
- Show moreLoading…