CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- amd radeon softwareArbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary...7.1 High
- amd radeon softwareAMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on...5.5 Medium
- amd radeon softwareStack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to...7.8 High
- amd radeon softwareOut of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead...7.8 High
- amd radeon softwareEscape call interface in the AMD Graphics Driver for Windows may cause privilege escalation.7.8 High
- amd radeon softwareOut of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to...5.5 Medium
- amd radeon softwareArbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or...5.5 Medium
- amd radeon softwareStack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege...7.8 High
- amd radeon softwareAn untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or...7.8 High
- nextcloud talk, kiteworks security-advisories +1 moreXSS in Talk6.4 Medium
- discourse rails multisiteSecure/signed cookies share secrets between sites in rails_multisite8.3 High
- amd radeon softwareAn insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow...7.8 High
- oretnom23 online learning systemSourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in...9.8 Critical
- amd radeon softwarePool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to...7.8 High
- montala resourcespaceA directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote...9.1 Critical
- montala resourcespaceA SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 <...9.8 Critical
- amd radeon softwareImproper parameters validation in some trusted applications of the PSP contained in the AMD...7.8 High
- amd radeon softwareA potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler...5.5 Medium
- amd radeon softwareArbitrary Decrement Privilege Escalation in AMD Graphics Driver for Windows 10 may lead to...7.8 High
- amd radeon softwareKernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass.5.5 Medium
- orckestra c1 cmsThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- netgear r6400v2, cax80 firmware, d6220 firmware +42 more +44 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic...3.7 Low
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic...4.4 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting....5.4 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain...5.3 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash...4.4 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain...5.9 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on...3.1 Low
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear...6.2 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to...4.3 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to...5.4 Medium
- amd radeon softwareArbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service.7.1 High
- amd radeon softwareAn arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially...7.8 High
- montala resourcespaceResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability...6.1 Medium
- amd radeon softwareOut of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to...5.5 Medium
- amd radeon softwareA potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode...7.8 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parser in accepts requests with a space (SP) right after the header name before the colon....6.5 Medium
- atmail** UNSUPPORTED WHEN ASSIGNED ** WebAdmin Control Panel in Atmail 6.5.0 (a version released in...6.1 Medium
- advantech hmi designer, webaccess hmi designer +1 moreAzeoTech DAQFactory5.4 Medium
- advantech hmi designer, webaccess hmi designer +1 moreAzeoTech DAQFactory7.8 High
- alquistai alquistAlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a...7.5 High
- grand vice info webopac7, vice webopac +1 moreGrand Vice info Co. webopac7 - Arbitrary File Upload8.8 High
- grand vice info webopac7, vice webopac +1 moreGrand Vice info Co. webopac7 - Reflected XSS6.1 Medium
- asus p453uj biosASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer6.3 Medium
matioOSS-FuzzHeap-buffer-overflow in H5G__node_foundNo score- gmplib gmp, debian linux, netapp active iq unified manager +8 more +10 moreGNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...7.5 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...7.2 High
- Show moreLoading…