CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- linuxfoundation fabricHTTP Request Smuggling in github.com/hyperledger/fabric7.5 High
- ethereum go ethereumDenial of Service in Go-Ethereum5.5 Medium
- linuxfoundation fabricNULL Pointer Dereference in HyperLedger Fabric7.5 High
- google androidIn apusys, there is a possible memory corruption due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to incorrect error handling. This could lead...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...4.4 Medium
- google androidIn apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...4.4 Medium
- google androidIn ccu, there is a possible memory corruption due to a use after free. This could lead to local...6.7 Medium
- google androidIn apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...4.4 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This...6.7 Medium
- google androidIn edma driver, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This...6.7 Medium
- google androidIn mdlactl driver, there is a possible memory corruption due to a use after free. This could lead...6.7 Medium
- google androidIn flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This...5.5 Medium
- google androidIn asf extractor, there is a possible out of bounds read due to an integer overflow. This could...5.5 Medium
- google androidIn asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This...5.5 Medium
- google androidIn asf extractor, there is a possible out of bounds read due to an integer overflow. This could...5.5 Medium
- google androidIn asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This...5.5 Medium
- google androidIn ape extractor, there is a possible out of bounds read due to a missing bounds check. This...5.5 Medium
- webfactory ltd. wp reset proWordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerability8.8 High
- webfactory ltd. wp reset proWordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability8.8 High
- puppet agent, server, fedoraproject fedora +1 more +3 moreUnsafe HTTP Redirect in Puppet Agent and Puppet Server9.8 Critical
- puppet, puppet agent, fedoraproject fedora +1 more +3 moreSilent Configuration Failure in Puppet Agent6.5 Medium
- puppet, puppet enterprise, connect +2 moreA flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters...4.4 Medium
- puppet continuous deliveryA flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user...8.1 High
- aveva pi web apiOSIsoft PI Web API6.9 Medium
opensipsOSS-FuzzHeap-buffer-overflow in _parse_toNo score- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2...7.5 High
- wireshark, fedoraproject fedora +1 moreNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...7.5 High
drupal/corePackagistThe Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal, along with a hotfix for that update. Vulnerabilities are possible if Drup…No score- metabaseGeoJSON URL validation can expose server files and environment variables to unauthorized users10.0 Critical
- nebulab solidus auth deviseAuthentication Bypass by CSRF Weakness9.3 Critical
- spree auth devise, spreecommerce spree auth devise +1 moreAuthentication Bypass by CSRF Weakness9.3 Critical
- intel hardware accelerated execution managerUncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an...6.2 Medium
- intel hardware accelerated execution managerUncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an...8.4 High
- intel sgx sdk, celeron j1750 firmware, celeron j1800 firmware +180 more +182 moreImproper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled...6.7 Medium
- intel thunderbolt non-dch driverImproper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all...7.8 High
- intel endpoint management assistantImproper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user...7.5 High
- intel 7265 firmware, ac1550 firmware, ac 3165 firmware +12 more +14 moreImproper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in...5.7 Medium
- intel 7265 firmware, ac1550 firmware, ac 3165 firmware +12 more +14 moreImproper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi...6.5 Medium
- intel 7265 firmware, 9260 firmware, ac1550 firmware +13 more +15 moreOut-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating...5.5 Medium
- intel 7265 firmware, 9260 firmware, ac1550 firmware +13 more +15 moreImproper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple...6.5 Medium
- convoypanel panelCross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys4.3 Medium
- intel 7265 firmware, ac1550 firmware, ac 3165 firmware +12 more +14 moreUncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10...7.8 High
- intel 7265 firmware, 9260 firmware, ac 3165 firmware +10 more +12 moreImproper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an...8.8 High
- intel 7265 firmware, ac1550 firmware, ac 3165 firmware +12 more +14 moreImproper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi...8.1 High
- Show moreLoading…