CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +14 more +16 moreActive Directory Domain Services Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +13 more +15 moreWindows Feedback Hub Elevation of Privilege Vulnerability5.5 Medium
- microsoft chakracore, windows 10 version 1507, windows 10 version 1607 +13 more +15 moreChakra Scripting Engine Memory Corruption Vulnerability4.2 Medium
- microsoft active directory, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreActive Directory Domain Services Elevation of Privilege Vulnerability7.5 High
- microsoft visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10) +22 more +24 moreDiagnostics Hub Standard Collector Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +14 more +16 moreMicrosoft Windows Media Foundation Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreMicrosoft COM for Windows Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 2004 +11 more +13 moreWindows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability6.8 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +36 more +38 moreWindows Installer Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +11 more +13 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Fast FAT File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft azure sphereAzure Sphere Information Disclosure Vulnerability2.3 Low
- microsoft azure sphereAzure Sphere Information Disclosure Vulnerability4.4 Medium
- microsoft azure sphereAzure Sphere Information Disclosure Vulnerability6.7 Medium
- microsoft fslogixFSLogix Information Disclosure Vulnerability5.5 Medium
- microsoft power bi report server, power bi report server version 1.11.8091.10468, power bi report server version 1.12.7977.29537 +2 morePower BI Report Server Spoofing Vulnerability7.6 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability4.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2013 service pack 1 +5 more +7 moreMicrosoft Access Remote Code Execution Vulnerability6.1 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreCredential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +14 more +16 moreWindows Denial of Service Vulnerability7.5 High
- microsoft edge, edge (chromium-based) in ie mode +1 moreMicrosoft Edge (Chrome based) Spoofing on IE Mode4.3 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 21 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability6.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +13 more +15 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft remote desktop client for windows desktop, windows 10 version 1507, windows 10 version 1607 +28 more +30 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft remote desktop client for windows desktop, remote desktop client, windows 10 version 1507 +20 more +22 moreRemote Desktop Protocol Client Information Disclosure Vulnerability7.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability4.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +12 more +14 moreWindows Desktop Bridge Elevation of Privilege Vulnerability7.8 High
- microsoft azure real time operating systemAzure RTOS Information Disclosure Vulnerability3.3 Low
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +10 more +12 moreMicrosoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability9.0 Critical
libavcOSS-FuzzHeap-buffer-overflow in ih264d_mark_err_slice_skipNo score- opengamepanelAn issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. $HOME/OGP/Cfg/Config...8.8 High
- opengamepanelAn issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated...8.8 High
- knx engineering tool software 6** DISPUTED ** KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt...5.5 Medium
- thrukThruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the...6.1 Medium
- thrukThruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]...6.1 Medium
- starkbank elixir ecdsaecdsa-elixir fails to check signatures, vulnerable to message forging9.8 Critical
- starkbank ecdsa-javaImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
- starkbank ecdsa-nodeImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
- starkbank ecdsa-pythonImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
- starkbank ecdsa-dotnetImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
tzdata-javaAlmaLinuxtzdata bug fix and enhancement updateNo scorelibsss_nss_idmap-develAlmaLinuxsssd bug fix and enhancement updateNo scoreaspnetcore-runtime-6.0AlmaLinux,aspnetcore-targeting-pack-6.0AlmaLinux,dotnetAlmaLinux +8 more +10 more.NET 6.0 bugfix and enhancement updateNo scoregnome-shell-extension-heads-up-displayAlmaLinux,gnome-classic-sessionAlmaLinux,gnome-shell-extension-apps-menuAlmaLinux +22 more +24 moregnome-shell-extensions bug fix and enhancement updateNo score- red hat httpd, redhat enterprise linux +1 moreMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...9.8 Critical
aspnetcore-runtime-5.0AlmaLinux,aspnetcore-targeting-pack-5.0AlmaLinux,dotnet-apphost-pack-5.0AlmaLinux +6 more +8 more.NET 5.0 bugfix updateNo scoreaspnetcore-runtime-3.1AlmaLinux,aspnetcore-targeting-pack-3.1AlmaLinux,dotnet-apphost-pack-3.1AlmaLinux +6 more +8 more.NET Core 3.1 bugfix updateNo scoreibusAlmaLinux,ibus-develAlmaLinux,ibus-devel-docsAlmaLinux +5 more +7 moreibus bug fix updateNo score- Show moreLoading…