CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim7.3 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad...8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of...8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of...8.8 High
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability5.5 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Improper Logging Restriction Vulnerability4.9 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector SQL Injection Vulnerability4.9 Medium
- edgexfoundry app-functions-sdk-go, edgex foundry, app service configurable +1 more +3 moreBroken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors5.4 Medium
transfigMageiaUpdated transfig packages fix security vulnerabilityNo score- gnu gcc, binutils +1 moreGCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component...7.8 High
solidus_coreRubyGemsAuthentication Bypass by CSRF Weakness9.3 Critical- adobe creative cloud desktop application, gocart +1 moreAdobe Creative Cloud DLL Hijacking Local Application Denial of Service4.2 Medium
- gallagher command centreImproper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server...8.1 High
- gallagher command centreUnquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged...5.2 Medium
- gallagher command centreImproper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to...8.1 High
- gallagher command centre, command center +1 moreAn Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an...7.1 High
- gallagher command centre mobile connect for android, command centre mobile connect +1 moreImproper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle...7.7 High
- gallagher command centre mobile client for android, command centre mobile client +1 moreImproper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle...9.0 Critical
- adobe animateAdobe Animate SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe animateAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe animateAdobe Animate GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe animateAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe animateAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe animateAdobe Animate FLA File Parsing Use After Free Remote Code Execution7.8 High
- adobe animateAdobe Animate FLA File Parsing Null Pointer Dereference Application Denial of Service5.5 Medium
- adobe animateAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe animateAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe animateAdobe Animate Memory Corruption Could Lead To Arbitrary Code Execution7.8 High
- hitachi energy gms600, pwc600, relion 650 +8 more +10 moreInsufficient Security Control Vulnerability7.2 High
- adobe after effectsAdobe After Effects NULL Pointer Dereference Application Denial of Service5.5 Medium
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects MXF File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects NULL Pointer Dereference Application Denial of Service5.5 Medium
- adobe after effectsAdobe After Effects SGI File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects SVG File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
github.com/containerd/containerdGoAmbiguous OCI manifest parsing3.0 Lowgithub.com/opencontainers/image-specGoClarify `mediaType` handling3.0 Low- hitachi energy relion 670 series, relion 670/650 series, relion 670/650/sam600-io +3 more +5 moreInsufficient Security Control Vulnerability8.1 High
- elastic kibanaKibana Sensitive Data Disclosure2.7 Low
- elastic kibanaIt was discovered that on Windows operating systems specifically, Kibana was not validating a...4.3 Medium
- Show moreLoading…