CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- cminds video lessons manager, todo video lessons manager pro – best video course lms, video lessons manager – best video course lms +2 moreVideo Lessons Manager - Admin+ Stored Cross-Site Scripting4.8 Medium
- metagauss download pluginDownload Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation5.7 Medium
- incsub forminator, unknown forminator – contact form, payment form & custom form builder +1 moreForminator < 1.15.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- feataholic maz loader, unknown maz loader – preloader builder for wordpress +1 moreMAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF4.3 Medium
- imagestowebp project images to webpImages to WebP < 1.9 - Authenticated Local File Inclusion7.5 High
- imagestowebp project images to webpImages to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)8.1 High
- ibm security guardium key lifecycle manager, security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0,...2.7 Low
- ibm connect:direct web services, sterling connect\ +1 moreIBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic...5.9 Medium
- ibm connect:direct web services, sterling connect\ +1 moreIBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting...5.9 Medium
- ibm mqIBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service...6.5 Medium
- element-hq synapse, fedoraproject fedora +1 morePath traversal in Matrix Synapse7.5 High
- aimhubio aimArbitrary file reading vulnerability in Aim8.6 High
- adobe creative cloud (desktop component), creative cloud desktop application +1 moreAdobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability7.8 High
- kaspersky password manager, password manager for windows +1 moreA component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity...7.8 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...5.3 Medium
- huawei harmonyosThere is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful...7.5 High
- huawei harmonyosThere is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei...7.5 High
- huawei harmonyosThere is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation...9.8 Critical
- huawei harmonyosThere is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of...6.5 Medium
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of...7.5 High
- huawei harmonyosThere is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei harmonyosThere is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation...7.5 High
- huawei harmonyosThere is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this...9.1 Critical
- huawei harmonyosThere is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei harmonyosThere is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this...5.3 Medium
- huawei emui, magic ui +1 moreThere is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of...7.5 High
- huawei emui, magic ui +1 moreThere is an Identity verification vulnerability in Huawei Smartphone.Successful exploitation of...5.3 Medium
- huawei ips module firmware, ngfw module firmware, secospace usg6300 firmware +3 more +5 moreThere is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is...5.9 Medium
- huawei fusioncomputeThere is a command injection vulnerability in CMA service module of FusionCompute product when...8.8 High
- huawei fusioncompute, ecns280 td firmware +1 moreThere is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and...5.5 Medium
- huawei imaster nce-fabric firmwareThere is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client...5.4 Medium
- huawei cloudengine 5800, cloudengine 5800 firmware +1 moreThere is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack...7.8 High
- mitsubishielectric gt softgot2000, got2000 gt2103-pmbd firmware, got2000 gt2103-pmbds2 firmware +47 more +49 moreImproper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series...7.5 High
- amazon web services aws-c-io, amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java +4 more +6 moreMissing SNI validation and inconsistent CA override function behavior within AWS IoT Device SDKs on Apple devices6.3 Medium
- amazon web services aws-c-io, amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java +4 more +6 moreInconsistent CA override function behavior within AWS IoT Device SDKs on Unix systems6.3 Medium
- amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java, aws iot device sdk v2 for node.js +3 more +5 moreTLS hostname validation issues within AWS IoT Device SDKs on macOS6.3 Medium
- Show moreLoading…