CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- google tensorflowUnitialized access in `EinsumHelper::ParseEquation`7.8 High
- google tensorflowIncomplete validation in `tf.summary.create_file_writer`5.5 Medium
- google tensorflowCrashes due to overflow and `CHECK`-fail in ops with large tensor shapes5.5 Medium
- google tensorflowOverflow/crash in `tf.tile` when tiling tensor is large5.5 Medium
- google tensorflowOverflow/crash in `tf.image.resize` when size is large5.5 Medium
- google tensorflowCrash in `max_pool3d` when size argument is 0 or negative5.5 Medium
- google tensorflowCrash in `tf.math.segment_*` operations5.5 Medium
- legalweb wp dsgvo tools (gdpr), wp dsgvo tools +1 moreWP DSGVO Tools (GDPR) <= 3.1.23 Unauthenticated Arbitrary Post Deletion7.5 High
- meross smart wi-fi 2 way wall switch, mss550x firmware +1 moreMeross MSS550X Missing Encryption of Sensitive Data7.4 High
- fusionpbxAn issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an...6.5 Medium
- fusionpbxAn issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters ...8.8 High
- fusionpbxAn issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters ...8.8 High
- fusionpbxAn issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters.8.8 High
- talend data catalogAn issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth,...9.8 Critical
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6...5.9 Medium
- irfanviewIrfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000...5.5 Medium
- irfanviewIrfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W...5.5 Medium
- irfanviewIrfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related...7.8 High
- remoteclinic remote clinicMultiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1) patients...6.1 Medium
- azeotech daqfactoryAzeoTech DAQFactory7.8 High
- azeotech daqfactoryAzeoTech DAQFactory5.0 Medium
- azeotech daqfactoryAzeoTech DAQFactory7.8 High
- azeotech daqfactoryAzeoTech DAQFactory5.7 Medium
- seopanel seo panelMultiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time...6.1 Medium
- getgrav getgrav/grav, grav +1 morePath Traversal in getgrav/grav8.8 High
- bookstackapp bookstack, bookstackapp/bookstack +1 morePath Traversal in bookstackapp/bookstack6.5 Medium
- shopping portal project portalMultiple Cross Site Scripting (XSS) vulnerabilities exists in PHPGurukul Shopping v3.1 via the (1...6.1 Medium
- phpgurukul hospital management systemMultiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management...6.1 Medium
- engineers online portal project online portalAn incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP...7.5 High
- engineers online portal project online portalA SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id...9.8 Critical
- engineers online portal project online portalA file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via...9.8 Critical
- engineers online portal project online portalA SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id...9.8 Critical
- online event booking and reservation system project event booking and reservation systemA SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation...9.8 Critical
- engineers online portal project online portalA SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id...8.8 High
- engineers online portal project online portalAn SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the...9.8 Critical
- engineers online portal project online portalA Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online...5.4 Medium
- online event booking and reservation system project event booking and reservation systemAn HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation...4.3 Medium
libvirtSUSESecurity update for libvirtNo scorelibvirtopenSUSESecurity update for libvirtNo score- online event booking and reservation system project event booking and reservation systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking...5.4 Medium
- poweradmin pa server monitorA cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote...5.4 Medium
- sitecore xp, experience platform +1 moreSitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure...9.8 Critical
- samsung flowA missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows...5.9 Medium
- samsung smartthingsImproper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22...5.3 Medium
- samsung flowImproper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows...5.7 Medium
- samsung healthNon-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via...4.0 Medium
- samsung passImproper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without...3.3 Low
- samsung group sharingIntent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access...4.0 Medium
- google android, samsung mobile devices +1 moreImproper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers...5.0 Medium
- google android, samsung mobile devices +1 moreA vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov...7.9 High
- Show moreLoading…