CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- wazuhIn the wazuh-slack active response script in Wazuh before 4.2.5, untrusted user agents are passed...9.8 Critical
libjxlOSS-FuzzContainer-overflow in void jxl::CopyImageTo<int>No scorelibjxlOSS-FuzzSegv on unknown address in jxl::N_AVX2::SingleFromSingleNo scoreperfettoOSS-FuzzHeap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHashNo scorelibvipsOSS-FuzzHeap-buffer-overflow in jxl::N_AVX2::SingleFromSingleNo scorearrowOSS-FuzzHeap-buffer-overflow in parquet::DeltaByteArrayDecoder::GetInternalNo score- xen, fedoraproject fedora +1 morecertain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address...8.8 High
hylafax+openSUSESecurity update for hylafax+No scorelibvipsOSS-FuzzUNKNOWN READ in void jxl::CopyImageTo<int>No scorenet-snmpOSS-FuzzUNKNOWN WRITE in sprint_realloc_hinted_integerNo scoresaltDebiansalt - regression updateNo scorechromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilityNo score- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functions5.3 Medium
- nvidia gpu and tegra hardware, dgx-1 p100, dgx-1 v100 +133 more +135 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...4.1 Medium
- nvidia gpu and tegra hardware, dgx-1 p100, dgx-1 v100 +133 more +135 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...4.1 Medium
- nvidia gpu and tegra hardware, dgx-1 p100, dgx-1 v100 +133 more +135 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...4.1 Medium
- nvidia gpu and tegra hardware, geforce gt 605, geforce gt 610 +61 more +63 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...7.5 High
- nvidia gpu and tegra hardware, geforce gtx 950, geforce gtx 960 +33 more +35 moreNVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may...7.5 High
- nvidia gpu and tegra hardware, dgx-1 p100, dgx-1 v100 +105 more +107 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...4.1 Medium
- nvidia gpu and tegra hardware, dgx-1 p100, dgx-1 v100 +133 more +135 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...4.1 Medium
- nvidia gpu and tegra hardware, dgx-1 p100, dgx-1 v100 +133 more +135 moreNVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...4.1 Medium
- dell secure connect gateway (scg) 5.0 application, secure connect gateway +1 moreDell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A...7.8 High
- dell networking x-series, x1008 firmware, x1008p firmware +7 more +9 moreDell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection...6.1 Medium
- dell networking x-series, x1008 firmware, x1008p firmware +7 more +9 moreDell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation...7.5 High
- dell networking x-series, x1008 firmware, x1008p firmware +7 more +9 moreDell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass...7.5 High
- dell networking os10Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure...3.3 Low
- dell networking os10Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled...4.9 Medium
- dell networking os, networking os10 +1 moreNetworking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an...5.9 Medium
- dell networking os, networking os10 +1 moreNetworking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege...8.8 High
- dell networking os, networking os10 +1 moreNetworking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an...8.1 High
- negocios ragic cloud dbReflected XSS Vulnerability in Ragic Cloud DB5.3 Medium
- qnap qmailagentCSRF Vulnerability in QmailAgent6.8 Medium
arrowOSS-FuzzHeap-buffer-overflow in arrow::internal::ValidateArrayImpl::VisitNo score- churchcrm crm, oroinc client relationship management +1 moreThe disqualify lead action may be executed without CSRF token check4.2 Medium
validatornpm,@rootio/validatorRoot +1 moreInefficient Regular Expression Complexity in Validator.js5.3 Medium- sharetribeOS command injection in Sharetribe Go9.8 Critical
- cloudflare octorpkiImproper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki7.5 High
- algolia algoliasearch-helperPrototype Pollution5.9 Medium
- gerbv, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability exists in the drill format T-code tool number functionality...10.0 Critical
- philips mri 1.5t, mri 3t, mri 1.5t firmware +1 more +3 morePhilips MRI 1.5T and 3T Incorrect Ownership Assignment5.9 Medium
- philips mri 1.5t, mri 3t, mri 1.5t firmware +1 more +3 morePhilips MRI 1.5T and 3T Information Exposure5.9 Medium
- philips mri 1.5t, mri 3t, mri 1.5t firmware +1 more +3 morePhilips MRI 1.5T and 3T Improper Access Control5.9 Medium
- quaggaAn issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested...7.8 High
- backupbliss backup migration, backup migration (wordpress plugin) +1 moreWordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability4.8 Medium
- myscada mydesignermySCADA myDESIGNER7.3 High
- concretecms concrete cmsImproper file handling in concrete5/core7.2 High
- concretecms concrete cmsExposure of sensitive information in concrete5/core7.5 High
- ivanti connect secure, pulsesecure pulse connect secure +1 moreA vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated...7.5 High
- concretecms concrete cmsPassword exposure in concrete5/core7.5 High
- concretecms concrete cmsImproper Privilege Management in Concrete CMS8.8 High
- Show moreLoading…