# CVEs published 2021-11-14

17 CVEs were published on November 14, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-43272](https://cve.now/CVE-2021-43272.md): An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. (no CVSS)
- [CVE-2021-43280](https://cve.now/CVE-2021-43280.md): A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. (no CVSS)
- [CVE-2021-43390](https://cve.now/CVE-2021-43390.md): An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-43279](https://cve.now/CVE-2021-43279.md): An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. (no CVSS)
- [CVE-2021-43278](https://cve.now/CVE-2021-43278.md): An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-43277](https://cve.now/CVE-2021-43277.md): An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. (no CVSS)
- [CVE-2021-43276](https://cve.now/CVE-2021-43276.md): An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. (no CVSS)
- [CVE-2021-43275](https://cve.now/CVE-2021-43275.md): A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. (no CVSS)
- [CVE-2021-43274](https://cve.now/CVE-2021-43274.md): A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-43273](https://cve.now/CVE-2021-43273.md): An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-41057](https://cve.now/CVE-2021-41057.md): In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissio (no CVSS)
- [CVE-2021-26795](https://cve.now/CVE-2021-26795.md): A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to (no CVSS)
- [CVE-2020-16152](https://cve.now/CVE-2020-16152.md): The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers (no CVSS)
- [CVE-2020-14424](https://cve.now/CVE-2020-14424.md): Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme. (no CVSS)
- [CVE-2021-43617](https://cve.now/CVE-2021-43617.md): Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/Val (no CVSS)
- [CVE-2021-43336](https://cve.now/CVE-2021-43336.md): An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-43391](https://cve.now/CVE-2021-43391.md): An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.