CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia...6.7 Medium
drupal/openid_connect_windows_aadPackagistThis module enables users to authenticate through their Microsoft Azure AD account. The module does not sufficiently check authorization before updating user profile information in certain non-default…No score- adobe campaignAdobe Campaign Path Traversal Leads to Information Exposure7.5 High
- apache supersetPossible log injection6.5 Medium
- ibm spss statisticsIBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user...6.2 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability...6.2 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability...6.2 Medium
- zohocorp manageengine remote access plusZoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by...7.3 High
- zohocorp manageengine remote access plusZoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by...7.8 High
- zoho manageengine remote access plus serverZoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a...7.8 High
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0,...5.0 Medium
- recruitment management system project management systemThe Company's Recruitment Management System in id=2 of the parameter from view_vacancy app on...9.8 Critical
- tammersoft shared files, unknown shared files – easy download manager and file sharing plugin with frontend file upload +1 moreShared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting4.8 Medium
- qr redirector project redirector, unknown qr redirector +1 moreQR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- qr redirector project redirector, unknown qr redirector +1 moreQR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update4.3 Medium
- mousewheel smooth scroll project smooth scroll, unknown mousewheel smooth scroll +1 moreMouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF6.5 Medium
- insert pages project pages, unknown insert pages +1 moreInsert Pages < 3.7.0 - Contributor+ Arbitrary Posts/Pages Access4.3 Medium
- insert pages project pages, unknown insert pages +1 moreInsert Pages < 3.7.0 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown seo redirection plugin – 301 redirect manager, wp-buy seo redirection-301 redirect manager +1 moreSEO Redirection < 8.2 - Subscriber+ SQL Injection8.8 High
- helpful project helpfulHelpful < 4.4.59 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module5.4 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module5.4 Medium
- scott paterson accept donations with paypalPaypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- simple jwt login project jwt login, unknown simple jwt login – login and register to wordpress using jwt +1 moreSimple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRF8.8 High
- gesundheit-bewegt colorful categoriesColorful Categories < 2.0.15 - Arbitrary Colors Update via CSRF6.5 Medium
- joe dolson my tickets, my tickets project tickets +1 moreMy Tickets < 1.8.31 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- webventures client invoicing by sprout invoices, unknown client invoicing by sprout invoices – easy estimates and invoices for wordpress +1 moreClient Invoicing by Sprout Invoices < 19.9.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- wp performance score booster project performance score booster, unknown wp performance score booster – optimize speed, enable cache & page preload +1 moreWP Performance Score Booster < 2.1 - Settings Change via CSRF4.3 Medium
- sound4 ltd. streamStream < 3.8.2 - Admin+ SQL Injection8.8 High
- email log project log, sudar email log +1 moreEmail Log < 2.4.7 - Admin+ SQL Injection8.8 High
- laki patel testimonial, wpshopmart testimonial builder +1 moreTestimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new...6.5 Medium
- amazon freertosAmazon FreeRTOS 10.2.0 through 10.4.5 on the ARMv7-M and ARMv8-M MPU platforms does not prevent...7.8 High
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreIn the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb...4.6 Medium
- ckeditor, ckeditor ckeditor4, drupal +8 more +10 moreAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML8.2 High
- optical character recognition project character recognitionA stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in...7.8 High
- optical character recognition project character recognitionAn use-after-free vulnerability was discovered in gocr through 0.53-20200802 in...5.5 Medium
- optical character recognition project character recognitionA stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in...7.8 High
- adobe preludeAdobe Prelude M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- adobe preludeAdobe Prelude M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe indesignAdobe Indesign Buffer Overflow Could Lead to Remote Code Execution7.8 High
- adobe bridge, premiere pro +1 moreAdobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution7.8 High
- adobe bridge, media encoder +1 moreAdobe Bridge Use After Free could lead to Arbitrary code execution7.8 High
- adobe media encoderAdobe Media Encoder memory corruption vulnerability could lead to remote code execution7.8 High
- adobe bridge, media encoder +1 moreAdobe Bridge Memory Corruption could lead to Arbitrary code execution7.8 High
- amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read...5.5 Medium
- amd 3rd gen amd epyc™, epyc 7232p firmware, epyc 72f3 firmware +18 more +20 moreInsufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort...5.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreAMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss...5.5 Medium
- amd 3rd gen amd epyc™, epyc 7003 firmware, epyc 72f3 firmware +18 more +20 moreInsufficient validation of guest context in the SNP Firmware could lead to a potential loss of...5.5 Medium
- Show moreLoading…