CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
KernelLinuxisdn: cpai: check ctr->cnr to avoid array index out of boundNo scoreKernelLinuxocfs2: mount fails with buffer overflow in strlenNo scoreKernelLinuxocfs2: fix data corruption after conversion from inline formatNo scoreKernelLinuxcan: peak_pci: peak_pci_remove(): fix UAFNo scoreKernelLinuxdrm/msm: Fix null pointer dereference on pointer edpNo scoreKernelLinuxNFC: digital: fix possible memory leak in digital_in_send_sdd_req()No scoreKernelLinuxNFC: digital: fix possible memory leak in digital_tg_listen_mdaa()No scoreKernelLinuxnvmem: Fix shift-out-of-bound (UBSAN) with byte size cellsNo scoreKernelLinuxcomedi: vmk80xx: fix bulk-buffer overflowNo scoreKernelLinuxcomedi: vmk80xx: fix transfer-buffer overflowsNo scoreKernelLinuxcomedi: ni_usb6501: fix NULL-deref in command pathsNo scoreKernelLinuxcomedi: dt9812: fix DMA buffers on stackNo scoreKernelLinuxisofs: Fix out of bound access for corrupted isofs imageNo scoreKernelLinuxscsi: core: Put LLD module refcnt after SCSI device is releasedNo scoreKernelLinuxregmap: Fix possible double-free in regcache_rbtree_exit()No scoreKernelLinuxIB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fieldsNo scoreKernelLinuxusbnet: sanity check for maxpacketNo scoreKernelLinuxnet: mdiobus: Fix memory leak in __mdiobus_registerNo scoreKernelLinuxisdn: mISDN: Fix sleeping function called from invalid contextNo scoreKernelLinuxisdn: cpai: check ctr->cnr to avoid array index out of boundNo scoreKernelLinuxocfs2: mount fails with buffer overflow in strlenNo scoreKernelLinuxcan: peak_pci: peak_pci_remove(): fix UAFNo scoreKernelLinuxdrm/msm: Fix null pointer dereference on pointer edpNo scoreKernelLinuxNFC: digital: fix possible memory leak in digital_in_send_sdd_req()No scoreKernelLinuxNFC: digital: fix possible memory leak in digital_tg_listen_mdaa()No scoreKernelLinuxnvmem: Fix shift-out-of-bound (UBSAN) with byte size cellsNo score- simple asn1 project asn1Panic on incorrect date input to `simple_asn1`7.5 High
- fruity project fruityImproper Input Validation in fruity7.5 High
apache-httpdOSS-FuzzHeap-buffer-overflow in apreq_header_attributeNo scorelibbpfOSS-FuzzHeap-buffer-overflow in __bpf_object__openNo score- opendesign drawings software development kitAn Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance...7.8 High
- opendesign drawings software development kit, siemens jt2go, solid edge +1 more +3 moreAn Out-of-Bounds Write vulnerability exists when reading a DXF file using Open Design Alliance...7.8 High
- tp-link tl-wr840n firmwareThe PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU...9.8 Critical
- showdoc, star7th star7th/showdoc +1 moreCross-Site Request Forgery (CSRF) in star7th/showdoc5.4 Medium
- showdoc, star7th star7th/showdoc +1 moreCross-Site Request Forgery (CSRF) in star7th/showdoc4.3 Medium
- showdoc, star7th star7th/showdoc +1 moreCross-Site Request Forgery (CSRF) in star7th/showdoc4.3 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreUnrestricted Upload of File with Dangerous Type in bookstackapp/bookstack7.6 High
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii5.4 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreCross-Site Request Forgery (CSRF) in snipe/snipe-it4.3 Medium
- area17 area17/twill, twill +1 moreCross-Site Request Forgery (CSRF) in area17/twill6.3 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreCross-site Scripting (XSS) - Generic in snipe/snipe-it3.9 Low
- django-helpdesk django-helpdesk/django-helpdesk, django-helpdesk project django-helpdesk +1 moreCross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk8.8 High
- qnap multimedia consoleBuffer Overflow Vulnerability in Multimedia Console8.1 High
- qnap qmailagentReflected XSS Vulnerability in QmailAgent6.9 Medium
- npmjs npm, fedoraproject fedora, netapp next generation application programming interface +2 moreThe npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...9.0 Critical
- json-schema project json-schema, kriszyp kriszyp/json-schema, debian linux +2 morePrototype Pollution in kriszyp/json-schema9.8 Critical
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +281 more +283 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +281 more +283 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +281 more +283 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell powerscale nodes, emc powerscale nodes a100 firmware, emc powerscale nodes a2000 firmware +17 more +19 moreDell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated...6.8 Medium
- Show moreLoading…