CVEs published in November 2021
2,284 vulnerabilities, 191 critical, 13 exploited.
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability4.2 Medium
- microsoft edge for ios, edge ios +1 moreMicrosoft Edge for iOS Spoofing Vulnerability3.1 Low
- microsoft windows 10 update assistant, windows update assistant +1 moreWindows 10 Update Assistant Elevation of Privilege Vulnerability5.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability3.1 Low
- microsoft azure active directory, azure automation, azure migrate +2 more +4 moreAzure Active Directory Information Disclosure Vulnerability8.1 High
- microsoft windows 10 update assistant, windows update assistant +1 moreWindows 10 Update Assistant Elevation of Privilege Vulnerability5.0 Medium
- octopus tentacleWhen Octopus Tentacle is installed on a Linux operating system, the systemd service file...7.8 High
libvipsOSS-FuzzHeap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroupNo scorewolfmqttOSS-FuzzHeap-buffer-overflow in MqttDecode_PropsNo score- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...6.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...8.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...8.8 High
- debian linux, fedoraproject fedora, xen +2 moreguests may exceed their designated memory limit When a guest is permitted to have close to 16TiB...8.6 High
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...8.8 High
- getredash redashServer-Side Request Forgery (SSRF) in Redash6.8 Medium
- getredash redashInsecure default configuration8.1 High
- getredash redashVulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce)6.8 Medium
- d-link dwr-932c e1, dlink dwr-932c e1 firmware +1 moreMissing Authentication in debug_post_set.cgi in D-Link DWR-932C E1 Firmware 1.0.0.49.8 Critical
- d-link dwr-932c e1, dlink dwr-932c e1 firmware +1 moreOS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.49.8 Critical
- glavsoft llc tightvnc viewer, tightvnc +1 moreBuffer Overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer 2.8.599.8 Critical
- google chrome, debian linux +1 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a...4.3 Medium
- zyxel wsr30 firmware, nbg6818 series firmware, nbg6818 firmware +9 more +11 moreA vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30...7.8 High
- dell cloudlink, emc cloud link +1 moreDell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability....4.3 Medium
- dell cloudlink, emc cloud link +1 moreDell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A...5.9 Medium
- dell cloudlink, emc cloud link +1 moreDell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local...5.5 Medium
- dell cloudlink, emc cloud link +1 moreDell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection...5.4 Medium
- dell cloudlink, emc cloud link +1 moreDell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A...7.1 High
- dell cloudlinkDell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A...9.1 Critical
- dell cloudlinkDell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A...9.1 Critical
- dell emc networker, networker +1 moreDell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any...6.0 Medium
- dell emc idrac8 firmware, emc idrac9 firmware, integrated dell remote access controller (idrac) +2 moreDell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack...5.9 Medium
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreiDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An...6.5 Medium
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL...7.1 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This...7.8 High
- django-wikiDjango-wiki - Stored Cross-Site Scripting (XSS) in Notifications Section5.4 Medium
- mcafee policy auditor, mcafee,llc mcafee policy auditor +1 moreCross-Site Scripting vulnerability in Policy Auditor6.1 Medium
- mcafee policy auditor, mcafee,llc mcafee policy auditor +1 moreCross-Site Scripting vulnerability in Policy Auditor6.1 Medium
- implecode reviews plusReviews Plus < 1.2.14 - Subscriber+ Reviews DoS6.5 Medium
- advanced forms project forms, todo advanced forms, advanced forms ppro +2 moreAdvanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR8.8 High
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.4.8 - DOM Cross-Site-Scripting6.1 Medium
- imageboss, unknown imageboss – images up to 60% smaller & cdn +1 moreImageBoss < 3.0.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- tribulant slideshow gallerySlideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mainwp child, unknown mainwp child - securely connects sites to the mainwp wordpress manager dashboard +1 moreMainWP Child < 4.1.8 - Admin+ SQL Injection7.2 High
- implecode ecommerce product catalog plugin for wordpress, ecommerce product catalog +1 moreeCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting6.1 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.11 - Reflected Cross-Site Scripting6.1 Medium
- aam advanced access managerAdvanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- wpdeveloper betterlinks, unknown betterlinks – shorten, track and manage any url +1 moreBetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting5.4 Medium
- infornweb logo showcase with slick slider, unknown logo showcase with slick slider – logo carousel, logo slider & logo grid +1 moreLogo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting5.4 Medium
- Show moreLoading…