CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- schreikasten project schreikastenSchreikasten <= 0.14.18 - Author+ SQL Injections8.8 High
- post content xmlrpc project content xmlrpc, unknown post content xmlrpc +1 morePost Content XMLRPC <= 1.0 - Admin+ SQL Injections7.2 High
- wow-company wow forms, unknown wow forms – create any form with custom style +1 moreWow Forms <= 3.1.3 - Admin+ SQL Injection7.2 High
- g auto-hyperlink project auto-hyperlink, unknown g auto-hyperlink +1 moreG Auto-Hyperlink <= 1.0.1 - Admin+ SQL Injection7.2 High
- chameleon css project css, unknown chameleon css +1 moreChameleon CSS <= 1.2 - Subscriber+ SQL Injection8.8 High
- unknown spidercatalogSpiderCatalog <= 1.7.3 - Admin+ SQL Injection7.2 High
- addtoany share buttons, unknown addtoany share buttons +1 moreAddToAny Share Buttons < 1.7.48 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown storefront footer textStorefront Footer Text <= 1.0.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- edo888 translate wordpress – google language translator, gtranslate google language translator +1 moreTranslate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting4.8 Medium
- igexsolutions wpschoolpress, jdsofttech school management system – wpschoolpress +1 moreWPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injections8.8 High
- shareaholic similar posts, unknown similar posts – best related posts plugin for wordpress +1 moreSimilar Posts <= 3.1.5 - Admin+ Arbitrary PHP Code Execution7.2 High
- ibm mq applianceIBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by...5.3 Medium
- ibm security guardiumIBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site...4.8 Medium
- ibm qradar network securityIBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive...5.9 Medium
- ibm qradar network securityIBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm qradar network securityIBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in...6.8 Medium
- opnsenseA Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.6.1 Medium
- servicetonicUnauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0...9.8 Critical
- servicetonicArbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0...9.8 Critical
- servicetonicBlind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows...7.5 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to...8.8 High
- google android, chrome, debian linux +2 more +4 moreInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0...6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a...6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who...8.8 High
- apostrophe, apostrophecms +1 moreApostrophe - Insufficient Session Expiration9.8 Critical
- enrocrypt project enrocryptUse of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py7.5 High
- oppiaOppia 3.1.4 does not verify that certain URLs are valid before navigating to them.6.1 Medium
- vmware spring cloud gatewayRequest injection in Spring Cloud Gateway6.5 Medium
- eset cyber security, endpoint antivirus, endpoint security +4 more +6 moreDenial of service in ESET for Mac products5.5 Medium
- cloudera managerCloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view...5.3 Medium
- cloudera managerCloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.9.8 Critical
- cloudera managerCloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.6.1 Medium
- cloudera managerCloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.6.1 Medium
- cloudera hueCloudera Hue 4.6.0 allows XSS.6.1 Medium
- cloudera hueCloudera Hue 4.6.0 allows XSS via the type parameter.6.1 Medium
- xorux lpar2rrd, stor2rrd +1 moreA password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because...7.5 High
- xorux lpar2rrd, stor2rrd +1 morelpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.9.8 Critical
- xorux lpar2rrd, stor2rrd +1 moreA shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7...8.8 High
- php event calendar project event calendarPHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as...6.1 Medium
- kaysongroup php event calendarPHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax...9.8 Critical
- barrier project barrierAn issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the...7.5 High
- barrier project barrierAn issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side...7.5 High
- barrier project barrierAn issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a...7.5 High
- barrier project barrier, fedoraproject fedora +1 moreAn issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side...8.8 High
- hitachi vantara pentahoUploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify...2.7 Low
- hitachi vantara pentahoHitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute...9.8 Critical
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...5.3 Medium
- Show moreLoading…