CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- wildbit-soft wildbit viewerA buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial...5.5 Medium
- wildbit-soft wildbit viewerA buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial...5.5 Medium
- wildbit-soft wildbit viewerA buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer...5.5 Medium
- wildbit-soft wildbit viewerA User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6...5.5 Medium
- xnview mpXnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a...5.5 Medium
- xnview mpXnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a...5.5 Medium
- nomacsA buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a...5.5 Medium
- flowpaper pdf2jsonpdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream...7.5 High
- flowpaper pdf2jsonpdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.9.8 Critical
- science-miner pdf2xmlpdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.9.8 Critical
- science-miner pdf2xmlpdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.7.5 High
- science-miner pdf2xmlpdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage:...9.8 Critical
- science-miner pdf2xmlpdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.9.8 Critical
- science-miner pdf2xmlA NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows...7.5 High
- cloudflare octorpki, debian linux +1 moreOctoRPKI crashes when processing GZIP bomb returned via malicious repository4.2 Medium
- cloudflare octorpki, debian linux +1 moreInfinite certificate chain depth results in OctoRPKI running forever5.9 Medium
- cloudflare octorpki, debian linux +1 moreInfinite open connection causes OctoRPKI to hang forever4.4 Medium
- cloudflare octorpki, debian linux +1 moreNUL character in ROA causes OctoRPKI to crash4.4 Medium
- cloudflare octorpki, debian linux +1 moreArbitrary filepath traversal via URI injection7.4 High
- cloudflare octorpki, debian linux +1 moreMisconfigured IP address field in ROA leads to OctoRPKI crash4.2 Medium
- google exposure notification verification server, google llc exposure-notifications-verification-server +1 moreInsufficient Granularity of Access Control in GAEN Notification Server6.5 Medium
- rcdevs openotp tokenAn issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed...5.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows...8.8 High
- blackberry protectAn elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows...7.8 High
- blackberry protectA low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows...5.5 Medium
- blackberry protectA denial of service vulnerability in the message broker of BlackBerry Protect for Windows version...7.8 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces9.8 Critical
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces7.5 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users8.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)6.4 Medium
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)8.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates8.1 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: OS Command Injection Vulnerability in Web Interface XML API8.8 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication8.8 High
- eclipse theia, the eclipse foundation @theia/plugin-ext +1 moreImproper Verification of Communication Channel in @theia/plugin-ext6.1 Medium
@cyyynthia/tokenizenpmInsufficient Session Expiration in @cyyynthia/tokenizeNo score- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 Medium
- height8tech h8 ssrmsInsecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to...6.5 Medium
- genexis platinum 4410 firmwareCross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a...6.5 Medium
- Show moreLoading…