CVEs published November 13, 2021
14 CVEs were published on November 13, 2021: 2 critical, 3 high.
- Published
- 14
- Critical
- 2
- High
- 3
- Medium
- 7
- Low
- 1
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- star7th/showdoc · showdoc/showdoc
- 3
- snipe/snipe-it
- 2
- area17/twill
- 1
- bookstackapp/bookstack · ssddanbrown/bookstack
- 1
- django-helpdesk/django-helpdesk · django-helpdesk
- 1
- firefly-iii/firefly-iii · grumpydictator/firefly-iii
- 1
- kriszyp/json-schema · json-schema
- 1
- QNAP Systems Multimedia Console
- 1
- QNAP Systems QmailAgent
- 1
Critical 2
High 3
- CVE-2021-3915Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstackbookstackapp/bookstack · ssddanbrown/bookstack
- CVE-2021-3945Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdeskdjango-helpdesk/django-helpdesk · django-helpdesk
- CVE-2021-38684Buffer Overflow Vulnerability in Multimedia ConsoleQNAP Systems Multimedia Console
Medium, low and unrated 9
- CVE-2021-41653The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution
- CVE-2021-3683Cross-Site Request Forgery (CSRF) in star7th/showdocstar7th/showdoc · showdoc/showdoc
- CVE-2021-3775Cross-Site Request Forgery (CSRF) in star7th/showdocstar7th/showdoc · showdoc/showdoc
- CVE-2021-3776Cross-Site Request Forgery (CSRF) in star7th/showdocstar7th/showdoc · showdoc/showdoc
- CVE-2021-3921Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiifirefly-iii/firefly-iii · grumpydictator/firefly-iii
- CVE-2021-3931Cross-Site Request Forgery (CSRF) in snipe/snipe-itsnipe/snipe-it
- CVE-2021-3932Cross-Site Request Forgery (CSRF) in area17/twillarea17/twill
- CVE-2021-3938Cross-site Scripting (XSS) - Generic in snipe/snipe-itsnipe/snipe-it
- CVE-2021-34357Reflected XSS Vulnerability in QmailAgentQNAP Systems QmailAgent