CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
java-1.8.0-openjdkAlmaLinux,java-1.8.0-openjdk-accessibilityAlmaLinux,java-1.8.0-openjdk-accessibility-fastdebugAlmaLinux +17 more +19 morejava-1.8.0-openjdk bug fix and enhancement updateNo scorejava-11-openjdkAlmaLinux,java-11-openjdk-demoAlmaLinux,java-11-openjdk-demo-fastdebugAlmaLinux +20 more +22 morejava-11-openjdk bug fix and enhancement updateNo score- commscope arris surfboard sb8200 firmwareThe password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that...7.1 High
- hp laserjet managed mfp e62665 firmware, color laserjet cm4540 mfp firmware, color laserjet enterprise flow mfp m577 firmware +212 more +214 moreDuring installation with certain driver software or application packages an arbitrary code...8.8 High
- nlnet labs routinator, debian linux +1 moregzip transfer encoding caused out-of-memory crash7.5 High
- nlnet labs routinator, debian linux +1 moreHanging RRDP request7.5 High
- nlnet labs routinatorInfinite length chain of RRDP repositories7.5 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow could occur when OpenEXR processes a crafted file on systems where size_t <...5.5 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.7.5 High
- jetbrains hubIn JetBrains Hub before 2021.1.13415, a DoS via user information is possible.7.5 High
- jetbrains hubIn JetBrains Hub before 2021.1.13690, stored XSS is possible.6.1 Medium
- hp futuresmart 4A potential security vulnerability has been identified for certain HP printers and MFPs with Troy...7.8 High
- jetbrains hubIn JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.9.8 Critical
- jetbrains ktorIn JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, user enumeration was possible.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, stored XSS is possible.5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an...5.3 Medium
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive...5.3 Medium
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.7.3 High
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.7.3 High
- hp officejet pro 8210 d9l63a firmware, officejet pro 8210 d9l64a firmware, officejet pro 8210 j3p65a firmware +41 more +43 moreA Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001...9.1 Critical
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.5.3 Medium
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.5.3 Medium
- jetbrains youtrack mobileJetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.3.21051, stored XSS is possible.5.4 Medium
- jetbrains youtrackJetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.9.8 Critical
- jetbrains youtrackJetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.5.4 Medium
- hp futuresmart 3, futuresmart 4 +1 moreA potential security vulnerability has been identified for certain HP printers and MFPs that...6.1 Medium
- bitdefender gravityzoneImproper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)6.1 Medium
- hp color laserjet pro mfp m277 b3q10a firmware, color laserjet pro mfp m277 b3q10v firmware, color laserjet pro mfp m277 b3q11a firmware +2 more +4 moreA potential security vulnerability has been identified for HP LaserJet Solution Software (for...7.8 High
authselectAlmaLinux,authselect-compatAlmaLinux,authselect-libsAlmaLinux +2 moreauthselect bug fix and enhancement updateNo scoreiproute-develAlmaLinuxiproute bug fix and enhancement updateNo scoresevctlAlmaLinuxsevctl bug fix and enhancement updateNo score- lua, fedoraproject fedora +1 moreStack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform...5.5 Medium
- mendix, siemens mendix applications using mendix 8, mendix applications using mendix 9 +2 moreA vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18...4.3 Medium
- mendix, siemens mendix applications using mendix 8, mendix applications using mendix 9 +2 moreA vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18...6.5 Medium
- siemens siveillance video dlna server, siveillance video management software 2019 r1, siveillance video management software 2019 r2 +3 more +5 moreA vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video...7.5 High
- mendix, siemens mendix applications using mendix 7, mendix applications using mendix 8 +1 more +3 moreA vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23...5.5 Medium
- siemens climatix pol909 (awb module), climatix pol909 (awm module), climatix pol909 firmware +2 moreA vulnerability has been identified in Climatix POL909 (AWM module) (All versions < V11.34). The...7.4 High
- siemens simatic pcs 7 v8.2, simatic pcs 7 v9.0, simatic pcs 7 v9.1 +7 more +9 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...5.5 Medium
- siemens openpcs 7 v8.2, openpcs 7 v9.0, openpcs 7 v9.1 +23 more +25 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...7.7 High
- siemens simatic pcs 7 v8.2, simatic pcs 7 v9.0, simatic pcs 7 v9.1 +7 more +9 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...9.9 Critical
- siemens sentron powermanager v3, sentron powermanager 3 +1 moreA vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected...7.8 High
- Show moreLoading…