CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.9.8 Critical
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS...5.4 Medium
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.10.0 Critical
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.9.8 Critical
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 allow CSRF.6.5 Medium
- vivo jovi smart sceneBroken Access Control Vulnerability in Jovi Smart Scene5.5 Medium
- beeline smart box firmwareBeeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.8.8 High
- beeline smart box firmwareBeeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter...6.1 Medium
- sap se erp hcm portugal, sap erp human capital management +1 moreSAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the...4.3 Medium
- sap netweaver application server abap, sap se netweaver as for abap and abap platform +1 moreA certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions...4.9 Medium
- sap gui for windowsAn information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7...7.8 High
- sap commerceSAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary...8.8 High
- sap abap platform kernelSAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary...8.1 High
- job fair project fairUnrestricted access to predictable file paths in hov/jobfair7.5 High
- pixxio pixx.ioAn issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for...8.8 High
- pixxio pixx.ioAn issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for...8.8 High
- pega-sus google for jobsCross-site Scripting in pegasus/google-for-jobs5.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive...4.3 Medium
- uclibc, uclibc-ng project uclibc-ng +1 moreIn uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names...9.6 Critical
- ubeeinteractive ubc1319 firmwareVulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version...7.2 High
- phoenix contact fl mguard, phoenixcontact fl mguard 1102 firmware, fl mguard 1105 firmware +2 morePhoenix Contact: FL MGUARD lack of memory release in remote logging functionality7.5 High
- phoenix contact fl mguard, phoenixcontact fl mguard 1102 firmware, fl mguard 1105 firmware +2 morePhoenix Contact: FL MGUARD XSS through web-based management and REST API4.8 Medium
- publify project publify, publify core core +1 morePublify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload5.4 Medium
- publify project publify, publify core core +1 morePublify - Stored Cross-Site Scripting (XSS) in Editor5.4 Medium
- formalmsAn authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the...9.8 Critical
- mcafee drive encryption, mcafee,llc mcafee drive encryption (mde) +1 moreMDE DLL Search Order Hijacking vulnerability7.8 High
- github enterprise serverPath traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access6.5 Medium
- microsoft 3d viewer3D Viewer Remote Code Execution Vulnerability7.8 High
- microsoft 3d viewer3D Viewer Remote Code Execution Vulnerability7.8 High
- microsoft azure real time operating systemAzure RTOS Information Disclosure Vulnerability3.3 Low
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability7.8 High
- microsoft exchange, exchange server, exchange server 2016 cumulative update 21 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2019 version 16.7 (includes 16.0 – 16.6) +3 more +5 moreVisual Studio Elevation of Privilege Vulnerability4.7 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 On-Premises Remote Code Execution Vulnerability8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 21 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability6.5 Medium
- microsoft azure real time operating systemAzure RTOS Elevation of Privilege Vulnerability6.6 Medium
- microsoft azure real time operating systemAzure RTOS Elevation of Privilege Vulnerability6.6 Medium
- microsoft azure real time operating systemAzure RTOS Elevation of Privilege Vulnerability6.6 Medium
- microsoft azure rtos, azure real time operating system +1 moreAzure RTOS Information Disclosure Vulnerability3.3 Low
- microsoft azure sphereAzure Sphere Tampering Vulnerability6.0 Medium
- microsoft malware protection engineMicrosoft Defender Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +1 more +3 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Excel Security Feature Bypass Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +14 more +16 moreActive Directory Domain Services Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows Hello Security Feature Bypass Vulnerability5.7 Medium
- microsoft active directory, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreActive Directory Domain Services Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 2004, windows 10 version 20h2, windows 10 version 21h1 +5 more +7 moreWindows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Hyper-V Denial of Service Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreNTFS Elevation of Privilege Vulnerability8.8 High
- Show moreLoading…