CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java, aws iot device sdk v2 for node.js +4 more +6 moreTLS hostname validation issues within AWS IoT Device SDKs on Windows6.3 Medium
- shimo documentShimo Document v2.0.1 contains a cross-site scripting (XSS) vulnerability which allows attackers...5.4 Medium
- transloadit tusdotnetUse of Sha-1 in tusdotnet7.5 High
- claris filemaker pro, filemaker server +1 moreAn XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4...5.5 Medium
- secomea gatemanager, gatemanager 8250 firmware +1 moreGateManager does not enforce strict hostname matching for WEB server3.7 Low
- crocontrol asterixAsterix Heap-based Buffer Overflow9.1 Critical
- isync project isync, debian linux, fedoraproject fedora +2 moreA flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a...9.8 Critical
- we-con plc editorWECON PLC Editor7.8 High
- we-con plc editorWECON PLC Editor7.8 High
- trane symbio, symbio 700, symbio 800 +2 moreTrane Symbio Improper Control of Generation of Code7.5 High
- pekeupload project pekeuploadCross-site Scripting (XSS)5.4 Medium
- quobject docker-cli-jsArbitrary Code Execution9.0 Critical
- ssrf-agent project ssrf-agentServer-side Request Forgery (SSRF)6.5 Medium
- rapid7 nexposeRapid7 Nexpose Information Disclosure after logout3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Insecure direct object reference (IDOR) in a calendar web service5.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle contains CSRF vulnerability8.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreCross-site Scripting in moodle6.1 Medium
- moodleMoodle vulnerable to RCE via unsafe deserialization9.8 Critical
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...8.1 High
- adobe bridge, robohelp server +1 moreAdobe Bridge Buffer Overflow Arbitrary code execution7.8 High
- adobe incopyAdobe InCopy NULL Pointer Dereference Application Denial of Service5.5 Medium
- adobe incopyAdobe InCopy GIF File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude MXF File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge NULL Pointer Dereference could lead to Application denial-of-service5.5 Medium
- adobe preludeAdobe Prelude SVG File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude NULL Pointer Dereference Application Denial of Service5.5 Medium
- adobe preludeAdobe Prelude NULL Pointer Dereference Application Denial of Service5.5 Medium
- adobe preludeAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- hancom anysign4pcanySign directory traversal vulnerability7.5 High
- efm networks & multimedia iptime c200 ip camera, iptime c200 firmware +1 moreIpTime C200 IP camera remote code execution vulnerability7.5 High
- opendesign drawings sdkA Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance...7.8 High
- opendesign prc sdkAn Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC...8.8 High
- open-xchange ox app suiteOX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified...4.3 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within...6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via...5.3 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e...6.1 Medium
- open-xchange ox app suiteOX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader...5.4 Medium
- wipro holmesThe File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote...7.5 High
- open-xchange ox app suiteOX App Suite 7.10.5 allows XSS via an OX Chat system message.6.1 Medium
- open-xchange ox app suiteOX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering.6.1 Medium
- apache apisixPath traversal in request_uri variable7.5 High
- open-xchange ox app suiteThe middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in...6.0 Medium
- open-xchange ox app suiteOX App Suite 7.10.5 allows XSS via an OX Chat room name.6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive,...6.5 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.6.1 Medium
- open-xchange ox app suitechat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX...6.1 Medium
- Show moreLoading…