CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +192 more +194 morePossible use after free due improper validation of reference from call back to internal store...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +156 more +158 morePossible out of bound access due to improper validation of function table entries in Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible buffer overflow due to improper input validation in PDM DIAG command in FTM in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +161 more +163 morePossible buffer overflow due to improper input validation in factory calibration and test DIAG...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +70 more +72 morePossible denial of service scenario due to improper input validation of received NAS OTA message...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, ar8035 firmware +88 more +90 morePossible buffer over read due to improper IE size check of Bearer capability IE in MT setup...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +120 more +122 morePossible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 morePossible heap overflow due to improper length check of domain while parsing the DNS response in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...9.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 morePossible memory corruption due to Improper handling of hypervisor unmap operations for concurrent...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +40 more +42 morePossible integer overflow can occur due to improper length check while calculating count and...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +204 more +206 morePossible denial of service scenario can occur due to lack of length check on Channel Switch...5.3 Medium
- asus gt-axe11000, rt-ax3000, rt-ax55 +7 more +9 moreASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication3.7 Low
- broadcom emulex hba managerBroadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if...9.1 Critical
- broadcom emulex hba managerBroadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if...7.5 High
- broadcom emulex hba managerBroadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if...9.8 Critical
wolfmqttOSS-FuzzHeap-use-after-free in MqttDecode_PropsNo scorearrowOSS-FuzzMemcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternalNo score- bluez, debian linux +1 moreMemory leak in BlueZ4.3 Medium
- zoom on-premise meeting connector controller, on-premise meeting connector mmr, on-premise recording connector +2 more +4 moreAuthenticated remote command execution with root privileges via web console in MMR7.9 High
- zoom on-premise meeting connector mmr, on-premise recording connector, on-premise virtual room connector +3 more +5 morePre-auth Null pointer crash in on-premise web console4.0 Medium
- zoom client for meetings, zoom video communications inc client for meetings for ubuntu linux +1 moreHTML injection in Zoom Linux client3.7 Low
- zoom client for meetings, zoom video communications inc client for meetings for windows +1 moreZoom Windows installation executable signature bypass4.7 Medium
- keybase, zoom video communications inc keybase client for android, keybase client for ios +2 moreRetained exploded messages in Keybase Clients for Android and iOS3.7 Low
- keybase, zoom video communications inc keybase client for windows +1 morePath traversal of file names in Keybase Client for Windows7.2 High
openafsMageiaUpdated openafs packages fix security vulnerabilityNo score- apache traffic controlLDAP filter injection vulnerability in Traffic Ops9.8 Critical
- apache shardingsphere-uiDeserialization of Untrusted Data7.5 High
- debiki talkyardTalkyard - Host-Header Injection Leads to Account Takeover8.8 High
- liquidfilesLiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User...8.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file...9.8 Critical
- zohocorp manageengine patch connect plusZoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code...9.8 Critical
- zohocorp manageengine network configuration managerZoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in...9.8 Critical
- zohocorp manageengine network configuration managerZoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in...9.8 Critical
- realtek rtl8195am firmwareA buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the...9.8 Critical
libbpfOSS-FuzzHeap-buffer-overflow in __bpf_object__openNo score- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary...9.8 Critical
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...6.5 Medium
- postgresqlA man-in-the-middle attacker can inject false responses to the client's first few queries,...5.9 Medium
- fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 moreWhen the server is configured to use trust authentication with a clientcert requirement or to use...8.1 High
- balasys dheater, f5 big-ip access policy manager, big-ip advanced firewall manager +27 more +29 moreThe Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send...7.5 High
- softing opc, uatoolkit embedded, datafeed opc suite +4 more +6 moreAn issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and...7.5 High
- softing uatoolkit embedded, smartlink hw-dp +1 moreAn issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote...7.5 High
- softing opc, datafeed opc suite, secure integration server +1 more +3 moreAn issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote...7.5 High
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS Vulnerability6.1 Medium
- dolibarr erp\/crmDolibarr remote PHP code execution9.8 Critical
- ffmpegFFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted...5.5 Medium
- xiph speexA stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service...5.5 Medium
- xiph speex, fedoraproject fedora +1 moreA Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...5.5 Medium
- Show moreLoading…