CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context...6.5 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information...7.5 High
- lenovo thinkpad bios, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware +27 more +29 moreA potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow...6.7 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn improper access control vulnerability was reported in some Motorola-branded Binatone Hubble...6.5 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreSome device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble...5.3 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble...6.5 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreA buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble...6.5 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble...4.2 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that...6.8 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreA vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an...6.4 Medium
- lenovo ideapad s940-14iwl firmware, ideapad yoga s940-14iwl firmware, notebook and thinkpad bios +131 more +133 moreA potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo...4.4 Medium
- ibm system x 3550 m3, system x 3650 m3, system x3550 m3 firmware +1 more +3 moreA command injection vulnerability was reported in the Integrated Management Module (IMM) of...7.2 High
- lenovo legion phone pro (l79031), legion phone2 pro (l70081), legion phone2 pro \(l70081\) firmware +1 more +3 moreAn information disclosure vulnerability was reported in the Time Weather system widget on Legion...5.5 Medium
- lenovo thinkcentre and thinkstation bios, thinkcentre e93 firmware, thinkcentre m4500q firmware +18 more +20 moreA potential vulnerability in the SMI callback function that saves and restore boot script tables...6.7 Medium
- lenovo thinkpad bios, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware +37 more +39 moreA denial of service vulnerability was reported in some ThinkPad models that could cause a system...4.3 Medium
- lenovo ideapad s940-14iwl firmware, ideapad yoga s940-14iwl firmware, thinkpad bios +131 more +133 moreA potential vulnerability in the SMI callback function used to access flash device in some...6.7 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn unauthenticated remote code execution vulnerability was reported in some Motorola-branded...8.8 High
- lenovo desktop bios, ideacentre 3-07imb05 firmware, ideacentre 310s-08igm firmware +57 more +59 moreA vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access...6.4 Medium
- idreamsoft icmsiCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app...8.8 High
- linphone belle-sipBelledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From...7.5 High
- linphone belle-sipBelledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the...7.5 High
- ni service locatorThere is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0...7.8 High
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an...6.5 Medium
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute...6.1 Medium
- jamfThe server in Jamf Pro before 10.32.0 has a vulnerability affecting integrity and availability,...9.8 Critical
- apache supersetCredentials leak6.5 Medium
- htmldoc project htmldoc, debian linux +1 moreA stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code...7.8 High
- fluxcd kustomize-controllerPrivilege escalation to cluster admin on multi-tenant environments8.8 High
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not...4.3 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not...2.4 Low
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not...4.3 Medium
- ibm security siteprotector systemIBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive...4.0 Medium
- ibm security siteprotector systemIBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- alquistai alquistAlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a...7.5 High
- servermanagement project servermanagementServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56 is affected...7.5 High
- codingforentrepreneurs opencv rest apiOpenCV-REST-API master branch as of commit 69be158c05d4dd5a4aff38fdc680a162dd6b9e49 is affected...7.5 High
- clustering project clusteringClustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a...7.5 High
- ohmyzsh ohmyzsh/ohmyzsh, planetargon oh my zsh +1 moreOS Command Injection in ohmyzsh/ohmyzsh7.8 High
- red hat, inc. rpmThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 Medium
- linux kernelLinux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux...5.5 Medium
- jenkins squash tm publisher, jenkins project squash tm publisher (squash4jenkins) plugin +1 moreAgent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files8.1 High
- jenkins owasp dependency-check, jenkins project owasp dependency-check plugin +1 moreXXE vulnerability in Jenkins OWASP Dependency-Check Plugin7.1 High
- jenkins pom2config, jenkins project pom2config plugin +1 moreXXE vulnerability in Jenkins pom2config Plugin6.5 Medium
- jenkins performance, jenkins project performance plugin +1 moreXXE vulnerability in Jenkins Performance Plugin6.5 Medium
- jenkins scriptler, jenkins project scriptler plugin +1 moreStored XSS vulnerability in Jenkins Scriptler Plugin5.4 Medium
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices Plugin5.4 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, qualcomm aqt1000 firmware, qca1062 firmware +21 more +23 morePossible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 morePossible information exposure and denial of service due to NAS not dropping messages when...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +202 more +204 morePossible use after free due to improper memory validation when initializing new interface via...6.7 Medium
- Show moreLoading…