CVEs published November 18, 2021
70 CVEs were published on November 18, 2021: 1 critical, 27 high. Browse them by severity, product and exploitation status.
- Published
- 70
- Critical
- 1
- High
- 27
- Medium
- 10
- Low
- 1
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- Adobe After Effects
- 11
- Adobe Animate
- 10
- MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- 6
- MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- 4
- MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- 4
- Cisco Common Services Platform Collector Software
- 3
- Gallagher Command Centre
- 3
- github.com/hyperledger/fabric
- 2
- WebFactory WP Reset PRO
- 2
- Wireshark Foundation Wireshark
- 2
Critical 1
High 27
- CVE-2021-23193Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged…Gallagher Command Centre
- CVE-2021-23167Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the…Gallagher Command Centre
- CVE-2021-23146An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.Gallagher Command Center
- CVE-2021-23162Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command…Gallagher Command Centre Mobile Connect for Android
- CVE-2021-42524Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42272Adobe Animate GIF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42271Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42270Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42269Adobe Animate FLA File Parsing Use After Free Remote Code ExecutionAdobe Animate
- CVE-2021-42267Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionAdobe Animate
- CVE-2021-42266Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionAdobe Animate
- CVE-2021-40733Adobe Animate Memory Corruption Could Lead To Arbitrary Code ExecutionAdobe Animate
- CVE-2021-35534Insufficient Security Control VulnerabilityHitachi Energy Relion 670 Series · Hitachi Energy Relion… +4
- CVE-2021-40760Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40759Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40758Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40757Adobe After Effects MXF File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40755Adobe After Effects SGI File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40754Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40753Adobe After Effects SVG File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40752Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40751Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-35535Insufficient Security Control VulnerabilityHitachi Energy Relion 670 Series · Hitachi Energy Relion… +1
- CVE-2021-36909WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerabilityWebFactory WP Reset PRO
- CVE-2021-36908WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerabilityWebFactory WP Reset PRO
Show all 27 entriesShow fewer entries
- CVE-2021-39920NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted…Wireshark Foundation Wireshark
- CVE-2021-39928NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet…Wireshark Foundation Wireshark
Medium, low and unrated 42
- CVE-2021-40131Cisco Common Services Platform Collector Stored Cross-Site Scripting VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-40130Cisco Common Services Platform Collector Improper Logging Restriction VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-40129Cisco Common Services Platform Collector SQL Injection VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-41278Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via…edgexfoundry app-functions-sdk-go · github.com/edgexfoun… +2
- CVE-2021-37322GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
- CVE-2021-43017Adobe Creative Cloud DLL Hijacking Local Application Denial of ServiceAdobe GoCart
- CVE-2021-23197Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the…Gallagher Command Centre
- CVE-2021-42525Adobe Animate SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Animate
- CVE-2021-42268Adobe Animate FLA File Parsing Null Pointer Dereference Application Denial of ServiceAdobe Animate
- CVE-2021-40761Adobe After Effects NULL Pointer Dereference Application Denial of ServiceAdobe After Effects
- CVE-2021-40756Adobe After Effects NULL Pointer Dereference Application Denial of ServiceAdobe After Effects
- CVE-2021-37939It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts…Elastic Kibana · kibana
- CVE-2021-37938It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path, which would load .pbf…Elastic Kibana
- CVE-2021-43669A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0.github.com/hyperledger/fabric
- CVE-2021-43668Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered.github.com/ethereum/go-ethereum
- CVE-2021-43667A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0.github.com/hyperledger/fabric
- CVE-2021-0671In apusys, there is a possible memory corruption due to a missing bounds check.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0670In apusys, there is a possible memory corruption due to a use after free.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0669In apusys, there is a possible memory corruption due to a use after free.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0668In apusys, there is a possible memory corruption due to incorrect error handling.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0667In apusys, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0666In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0665In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0664In ccu, there is a possible memory corruption due to a use after free.MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6…
- CVE-2021-0659In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
Show all 42 entriesShow fewer entries
- CVE-2021-0658In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0657In apusys, there is a possible out of bounds write due to a stack-based buffer overflow.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0656In edma driver, there is a possible memory corruption due to a use after free.MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT…
- CVE-2021-0655In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check.MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893
- CVE-2021-0629In mdlactl driver, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893, MT8…
- CVE-2021-0624In flv extractor, there is a possible out of bounds read due to a heap buffer overflow.MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, M…
- CVE-2021-0623In asf extractor, there is a possible out of bounds read due to an integer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0622In asf extractor, there is a possible out of bounds read due to a heap buffer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0621In asf extractor, there is a possible out of bounds read due to an integer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0620In asf extractor, there is a possible out of bounds read due to a heap buffer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0619In ape extractor, there is a possible out of bounds read due to a missing bounds check.MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6…
- CVE-2021-0672In Browser app, there is a possible information disclosure due to a missing permission check.Android
- CVE-2021-27023A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a…Puppet Enterprise, Puppet Server, Puppet Agent · puppet
- CVE-2021-27025A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service…Puppet Enterprise, Puppet Agent · puppet
- CVE-2021-27026A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be loggedPuppet Enterprise, Puppet Connect
- CVE-2021-27024A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to…Puppet Continuous Delivery for Puppet Enterprise
- CVE-2021-43549OSIsoft PI Web APIOSIsoft PI Web API