CVEs published November 29 to December 5, 2021
251 CVEs were published Nov 29 to Dec 5, 2021, 5 of them critical. CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 251
- Critical
- 5
- Added to CISA KEV
- 5
- Busiest day
- Wed, Dec 1 (73)
- Quietest day
- Sat, Dec 4 (1)
- November 29, 202153 CVEs · 4 critical
- November 30, 202149 CVEs
- December 1, 202173 CVEs
- December 2, 202138 CVEs · 1 critical
- December 3, 202131 CVEs
- December 4, 20211 CVE
- December 5, 20216 CVEs
Added to CISA KEV 5
- CVE-2018-14847MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write a
- CVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-37415Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authenticatio
- CVE-2021-40438mod_proxy SSRFApache Software Foundation Apache HTTP Server
- CVE-2021-44077Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to un