CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- sambaA flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very...7.5 High
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...8.8 High
- sambaKerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC...8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...7.2 High
- samba, fedoraproject fedora +1 moreA flaw was found in the way samba, as an Active Directory Domain Controller, is able to support...8.8 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...5.9 Medium
com.starkbank:ecdsa-javaMaven,starkbank-ecdsanpm +1 moreSignature verification vulnerability in Stark Bank ecdsa librariesNo score- zyantific zydisPossible heap buffer overflow when using zycore string functions in formatter hooks5.9 Medium
- beescmsBEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component ...8.8 High
- casap automated enrollment system project automated enrollment systemMultiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated...6.1 Medium
- tailor management system project management systemMultiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0...6.1 Medium
- neoan neoan3-templateEvaluation of closures can lead to execution of methods & functions in current program scope9.8 Critical
apollo-servernpmCross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)No score- vfrontMultiple Cross Site Scripting (XSS) vulnerabilities exist in VFront 0.99.5 via the (1) s...6.1 Medium
- redhat coreos-installercoreos-installer < 0.10.0 writes world-readable Ignition config to installed system5.5 Medium
- online enrollment management system project enrollment management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment...5.4 Medium
- mra13 affiliates managerAffiliate Manager < 2.8.7 - Admin+ SQL injection7.2 High
- codesupply squaretypeSquaretype Modern Blog < 3.0.4 - Unauthenticated Private/Schedule Posts Disclosure5.3 Medium
- unknown wcfm – frontend manager for woocommerce along with bookings subscription listings compatible, wclovers frontend manager for woocommerce along with bookings subscription listings compatible +1 moreWCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL Injection8.8 High
- unknown wp seo redirect 301, wp seo redirect 301 project seo redirect 301 +1 moreWP SEO Redirect 301 < 2.3.2 - Redirect Deletion via CSRF4.3 Medium
- unknown visitor traffic real time statisticsVisitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL Injection8.8 High
- asgaros forum, unknown asgaros forum +1 moreAsgaros Forum < 1.15.13 - Unauthenticated SQL Injection9.8 Critical
- phoenix media rename project media rename, unknown phoenix media rename +1 morePhoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming4.3 Medium
- schiocco support boardSupport Board < 3.3.5 - Agent+ Stored Cross-Site Scripting5.4 Medium
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF4.3 Medium
- unknown wp survey plus, wp survey plus project survey plus +1 moreWP Survey Plus <= 1.0 - Subscriber+ AJAX Calls4.3 Medium
- androidbubbles wp header imagesWP Header Images < 2.0.1 - Reflected Cross-Site Scripting6.1 Medium
- draftpress header footer code managerHeader Footer Code Manager < 1.1.14 - Admin+ SQL Injections7.2 High
- batch cat project cat, unknown batch cat +1 moreBatch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts6.5 Medium
- publishpress post expirator, unknown post expirator: automatically unpublish wordpress posts +1 morePost Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion6.5 Medium
- unknown redirect 404 error page to homepage or custom page with logsRedirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRF6.5 Medium
- 404 to 301 project to 301, joelcj91 404 to 301 – redirect, log and notify 404 errors +1 more404 to 301 < 3.0.9 - Logs Deletion via CSRF6.5 Medium
- genetechsolutions pie register, unknown registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes +1 morePie Register < 3.7.1.6 - Unauthenticated SQL Injection9.8 Critical
- loco translate project translate, timwhitlock loco translate +1 moreLoco Translate < 2.5.4 - Authenticated PHP Code Injection6.5 Medium
- baden03 print-o-maticPrint-O-Matic < 2.0.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown export any wordpress data to xml/csv, wp all export project all export +1 moreWP All Export < 1.3.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- qwizcards project qwizcards, unknown qwizcards – online quizzes and flashcards +1 moreQwizcards < 3.62 - Admin+ Stored Cross Site Scripting4.8 Medium
- quiz tool lite project tool lite, unknown quiz tool lite +1 moreQuiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting4.8 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal4.3 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting6.1 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.6 - Unauthenticated Log Access7.5 High
- mra13 simple download monitorSimple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail9.0 Critical
- genie wp favicon project wp favicon, unknown genie wp favicon +1 moreGenie WP Favicon <= 0.5.2 - Arbitrary Favicon Change via CSRF6.5 Medium
- feataholic maz loader, unknown maz loader – preloader builder for wordpress +1 moreMAZ Loader < 1.3.3 - Contributor+ SQL Injection8.8 High
- igexsolutions wpschoolpress, jdsofttech school management system – wpschoolpress +1 moreWPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting4.8 Medium
- genetechsolutions pie register, unknown registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes +1 morePie Register < 3.7.1.6 - Unauthenticated Arbitrary Login8.1 High
- bookingholdings booking.com banner creatorBooking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- bookingholdings booking.com product helperBooking.com Product Helper < 1.0.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown unlimited popups, unlimited popups project popups +1 moreUnlimited PopUps <= 4.5.3 - Author+ SQL Injection8.8 High
- Show moreLoading…