CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...7.1 High
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...4.3 Medium
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...8.8 High
- barrier project barrierAn issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state...8.2 High
- golang go, fedoraproject fedora, oracle timesten in-memory database +2 moreGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 High
- golang go, debian linux, fedoraproject fedora +2 moreImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 High
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...7.5 High
- apostrophe, apostrophecms +1 moreApostrophe - XSS5.4 Medium
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification...7.8 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among...8.8 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol...7.0 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid...7.5 High
- cradlepoint ibr600 firmware, ibr600c firmware, ibr900 firmware +2 moreA restricted shell escape sequence is possible on Cradlepoint IBR900-600 7.2.60 devices that can...7.5 High
qpid-protonOSS-FuzzHeap-buffer-overflow in pn_buffer_appendNo scoreqpid-protonOSS-FuzzHeap-buffer-overflow in consume_listNo score- sap cloud sdk, cloud-sdk-js +1 morePossibility to elevate privileges or get unauthorized access to data5.9 Medium
- phpjabbers fundraising scriptStivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection...9.8 Critical
- phpjabbers fundraising scriptStivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection...9.8 Critical
- phpjabbers fundraising scriptStivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting ...6.1 Medium
- phpjabbers fundraising scriptStivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection...9.8 Critical
- phpjabbers fundraising scriptStivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting ...6.1 Medium
- 7twenty botPresence of non-blacklisted URL bypasses all other filters4.3 Medium
- pomeriumOIDC claims not updated from Identity Provider in Pomerium5.3 Medium
- google tensorflowArbitrary memory read in `ImmutableConst`6.6 Medium
- google tensorflowA use of uninitialized value vulnerability in Tensorflow5.5 Medium
- google tensorflowSegfault due to negative splits in `SplitV`5.5 Medium
- google tensorflowCode injection in `saved_model_cli`7.5 High
- google tensorflowUse after free in `CollectiveReduceV2`7.8 High
- google tensorflowAccess to invalid memory during shape inference in `Cudnn*` ops7.8 High
- google tensorflowHeap buffer overflow in `Transpose`5.5 Medium
- google tensorflowDeadlock in mutually recursive `tf.function` objects5.5 Medium
- google tensorflowInteger division by 0 in `tf.raw_ops.AllToAll`5.5 Medium
- google tensorflowIncomplete validation of shapes in multiple TF ops7.0 High
- google tensorflowIncomplete validation in boosted trees code8.8 High
- google tensorflowDivision by zero in `ParallelConcat`5.5 Medium
- google tensorflowOverflow/crash in `tf.range`5.5 Medium
- google tensorflowFPE in convolutions with zero size filters5.5 Medium
- google tensorflowMissing validation during checkpoint loading7.8 High
- google tensorflowNull pointer exception in `DeserializeSparse`5.5 Medium
- google tensorflowNull pointer exception when `Exit` node is not preceded by `Enter` op5.5 Medium
- google tensorflowUndefined behavior via `nullptr` reference binding in sparse matrix multiplication7.8 High
- google tensorflowReference binding to `nullptr` in `tf.ragged.cross`7.8 High
- google tensorflowSegfault while copying constant resource tensor5.5 Medium
- google tensorflowHeap OOB read in `SparseBinCount`7.1 High
- google tensorflowHeap OOB read in `FusedBatchNorm` kernels7.1 High
- google tensorflow`SparseFillEmptyRows` heap OOB read7.1 High
- google tensorflowHeap OOB read in `tf.ragged.cross`7.1 High
- google tensorflowHeap OOB read in shape inference for `QuantizeV2`7.1 High
- google tensorflowHeap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops7.1 High
- google tensorflowHeap OOB read in `tf.raw_ops.SparseCountSparseOutput`7.1 High
- Show moreLoading…