CVE List - 2021 / November
Showing 601 - 700 of 1508 CVEs for November 2021 (Page 7 of 16)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2021-42292 | 2021-11-10 | Microsoft Excel Security Feature Bypass Vulnerability |
| CVE-2021-42296 | 2021-11-10 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2021-42298 | 2021-11-10 | Microsoft Defender Remote Code Execution Vulnerability |
| CVE-2021-42300 | 2021-11-10 | Azure Sphere Tampering Vulnerability |
| CVE-2021-42301 | 2021-11-10 | Azure RTOS Information Disclosure Vulnerability |
| CVE-2021-42302 | 2021-11-10 | Azure RTOS Elevation of Privilege Vulnerability |
| CVE-2021-42303 | 2021-11-10 | Azure RTOS Elevation of Privilege Vulnerability |
| CVE-2021-42304 | 2021-11-10 | Azure RTOS Elevation of Privilege Vulnerability |
| CVE-2021-42305 | 2021-11-10 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2021-42316 | 2021-11-10 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
| CVE-2021-42319 | 2021-11-10 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2021-42321 | 2021-11-10 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-42322 | 2021-11-10 | Visual Studio Code Elevation of Privilege Vulnerability |
| CVE-2021-42323 | 2021-11-10 | Azure RTOS Information Disclosure Vulnerability |
| CVE-2021-43208 | 2021-11-10 | 3D Viewer Remote Code Execution Vulnerability |
| CVE-2021-43209 | 2021-11-10 | 3D Viewer Remote Code Execution Vulnerability |
| CVE-2021-22870 | 2021-11-10 | Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access |
| CVE-2021-31853 | 2021-11-10 | MDE DLL Search Order Hijacking vulnerability |
| CVE-2021-43136 | 2021-11-10 | An authentication bypass issue in FormaLMS <= 2.4.4 allows an... |
| CVE-2021-25974 | 2021-11-10 | Publify - Stored Cross-Site Scripting (XSS) in Editor |
| CVE-2021-25975 | 2021-11-10 | Publify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload |
| CVE-2021-34582 | 2021-11-10 | Phoenix Contact: FL MGUARD XSS through web-based management and REST API |
| CVE-2021-34598 | 2021-11-10 | Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality |
| CVE-2021-39474 | 2021-11-10 | Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected... |
| CVE-2021-43523 | 2021-11-10 | In uClibc and uClibc-ng before 1.0.39, incorrect handling of special... |
| CVE-2021-38887 | 2021-11-10 | IBM InfoSphere Information Server 11.7 could allow an authenticated user... |
| CVE-2021-43561 | 2021-11-10 | An XSS issue was discovered in the google_for_jobs (aka Google... |
| CVE-2021-43562 | 2021-11-10 | An issue was discovered in the pixxio (aka pixx.io integration... |
| CVE-2021-43563 | 2021-11-10 | An issue was discovered in the pixxio (aka pixx.io integration... |
| CVE-2021-43564 | 2021-11-10 | An issue was discovered in the jobfair (aka Job Fair)... |
| CVE-2021-40501 | 2021-11-10 | SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86,... |
| CVE-2021-40502 | 2021-11-10 | SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not... |
| CVE-2021-40503 | 2021-11-10 | An information disclosure vulnerability exists in SAP GUI for Windows... |
| CVE-2021-40504 | 2021-11-10 | A certain template role in SAP NetWeaver Application Server for... |
| CVE-2021-42062 | 2021-11-10 | SAP ERP HCM Portugal does not perform necessary authorization checks... |
| CVE-2021-41427 | 2021-11-10 | Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting... |
| CVE-2021-41426 | 2021-11-10 | Beeline Smart box 2.0.38 is vulnerable to Cross Site Request... |
| CVE-2020-12488 | 2021-11-10 | Broken Access Control Vulnerability in Jovi Smart Scene |
| CVE-2021-40518 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 allow CSRF. |
| CVE-2021-40521 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution. |
| CVE-2021-40519 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials. |
| CVE-2021-40517 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored... |
| CVE-2021-40520 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials. |
| CVE-2020-28137 | 2021-11-10 | Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28,... |
| CVE-2021-3380 | 2021-11-10 | Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS... |
| CVE-2021-41038 | 2021-11-10 | In versions of the @theia/plugin-ext component of Eclipse Theia prior... |
| CVE-2021-3056 | 2021-11-10 | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication |
| CVE-2021-3058 | 2021-11-10 | PAN-OS: OS Command Injection Vulnerability in Web Interface XML API |
| CVE-2021-3059 | 2021-11-10 | PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates |
| CVE-2021-3060 | 2021-11-10 | PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) |
| CVE-2021-3061 | 2021-11-10 | PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) |
| CVE-2021-3062 | 2021-11-10 | PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users |
| CVE-2021-3063 | 2021-11-10 | PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces |
| CVE-2021-3064 | 2021-11-10 | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces |
| CVE-2021-32021 | 2021-11-10 | A denial of service vulnerability in the message broker of... |
| CVE-2021-32022 | 2021-11-10 | A low privileged delete vulnerability using CEF RPC server of... |
| CVE-2021-32023 | 2021-11-10 | An elevation of privilege vulnerability in the message broker of... |
| CVE-2021-22048 | 2021-11-10 | The vCenter Server contains a privilege escalation vulnerability in the... |
| CVE-2021-3572 | 2021-11-10 | A flaw was found in python-pip in the way it... |
| CVE-2021-42111 | 2021-11-10 | An issue was discovered in the RCDevs OpenOTP app 1.4.13... |
| CVE-2020-23872 | 2021-11-10 | A NULL pointer dereference in the function TextPage::restoreState of pdf2xml... |
| CVE-2020-23873 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a heap-buffer overflow in... |
| CVE-2020-23874 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a heap-buffer overflow in... |
| CVE-2020-23876 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a memory leak in... |
| CVE-2020-23877 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a stack buffer overflow... |
| CVE-2020-23878 | 2021-11-10 | pdf2json v0.71 was discovered to contain a stack buffer overflow... |
| CVE-2020-23879 | 2021-11-10 | pdf2json v0.71 was discovered to contain a NULL pointer dereference... |
| CVE-2020-23884 | 2021-11-10 | A buffer overflow in Nomacs v3.15.0 allows attackers to cause... |
| CVE-2020-23886 | 2021-11-10 | XnView MP v0.96.4 was discovered to contain a heap overflow... |
| CVE-2020-23887 | 2021-11-10 | XnView MP v0.96.4 was discovered to contain a heap overflow... |
| CVE-2020-23888 | 2021-11-10 | A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer... |
| CVE-2020-23889 | 2021-11-10 | A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit... |
| CVE-2020-23890 | 2021-11-10 | A buffer overflow in WildBit Viewer v6.6 allows attackers to... |
| CVE-2020-23891 | 2021-11-10 | A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer... |
| CVE-2020-23893 | 2021-11-10 | A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer... |
| CVE-2020-23894 | 2021-11-10 | A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer... |
| CVE-2020-23895 | 2021-11-10 | A User Mode Write AV in Editor+0x76af of WildBit Viewer... |
| CVE-2020-23896 | 2021-11-10 | A User Mode Write AV in Editor+0x576b of WildBit Viewer... |
| CVE-2020-23897 | 2021-11-10 | A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer... |
| CVE-2020-23898 | 2021-11-10 | A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer... |
| CVE-2020-23899 | 2021-11-10 | A User Mode Write AV in Editor+0x5f91 of WildBit Viewer... |
| CVE-2020-23900 | 2021-11-10 | A buffer overflow in WildBit Viewer v6.6 allows attackers to... |
| CVE-2020-23901 | 2021-11-10 | A User Mode Write AV in Editor+0x5d15 of WildBit Viewer... |
| CVE-2020-23902 | 2021-11-10 | A buffer overflow in WildBit Viewer v6.6 allows attackers to... |
| CVE-2020-23903 | 2021-11-10 | A Divide by Zero vulnerability in the function static int... |
| CVE-2020-23904 | 2021-11-10 | A stack buffer overflow in speexenc.c of Speex v1.2 allows... |
| CVE-2020-23906 | 2021-11-10 | FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service... |
| CVE-2021-33816 | 2021-11-10 | The website builder module in Dolibarr 13.0.2 allows remote PHP... |
| CVE-2021-33618 | 2021-11-10 | Dolibarr ERP and CRM 13.0.2 allows XSS via object details,... |
| CVE-2021-40871 | 2021-11-10 | An issue was discovered in Softing Industrial Automation OPC UA... |
| CVE-2021-40872 | 2021-11-10 | An issue was discovered in Softing Industrial Automation uaToolkit Embedded... |
| CVE-2021-40873 | 2021-11-10 | An issue was discovered in Softing Industrial Automation OPC UA... |
| CVE-2021-42847 | 2021-11-11 | Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write... |
| CVE-2002-20001 | 2021-11-11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the... |
| CVE-2021-43573 | 2021-11-11 | A buffer overflow was discovered on Realtek RTL8195AM devices before... |
| CVE-2021-41080 | 2021-11-11 | Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to... |
| CVE-2021-41081 | 2021-11-11 | Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to... |
| CVE-2021-41833 | 2021-11-11 | Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to... |
| CVE-2021-42002 | 2021-11-11 | Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a... |
| CVE-2021-43397 | 2021-11-11 | LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges... |