CVEs published November 18, 2021
70 CVEs were published on November 18, 2021: 1 critical, 27 high.
- Published
- 70
- Critical
- 1
- High
- 27
- Medium
- 10
- Low
- 1
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- Adobe After Effects
- 11
- Adobe Animate
- 10
- MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- 6
- MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- 4
- MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- 4
- Cisco Common Services Platform Collector Software
- 3
- Gallagher Command Centre
- 3
- github.com/hyperledger/fabric
- 2
- WebFactory WP Reset PRO
- 2
- Wireshark Foundation Wireshark
- 2
Critical 1
High 27
- CVE-2021-23193Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators Gallagher Command Centre
- CVE-2021-23167Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the CommGallagher Command Centre
- CVE-2021-23146An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.Gallagher Command Center
- CVE-2021-23162Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command CGallagher Command Centre Mobile Connect for Android
- CVE-2021-42524Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42272Adobe Animate GIF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42271Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42270Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2021-42269Adobe Animate FLA File Parsing Use After Free Remote Code ExecutionAdobe Animate
- CVE-2021-42267Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionAdobe Animate
- CVE-2021-42266Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionAdobe Animate
- CVE-2021-40733Adobe Animate Memory Corruption Could Lead To Arbitrary Code ExecutionAdobe Animate
- CVE-2021-35534Insufficient Security Control VulnerabilityHitachi Energy Relion 670 Series · Hitachi Energy Relion… +4
- CVE-2021-40760Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40759Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40758Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40757Adobe After Effects MXF File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40755Adobe After Effects SGI File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40754Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40753Adobe After Effects SVG File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40752Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-40751Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-35535Insufficient Security Control VulnerabilityHitachi Energy Relion 670 Series · Hitachi Energy Relion… +1
- CVE-2021-36909WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerabilityWebFactory WP Reset PRO
- CVE-2021-36908WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerabilityWebFactory WP Reset PRO
- CVE-2021-39920NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture Wireshark Foundation Wireshark
- CVE-2021-39928NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injeWireshark Foundation Wireshark
Medium, low and unrated 42
- CVE-2021-40131Cisco Common Services Platform Collector Stored Cross-Site Scripting VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-40130Cisco Common Services Platform Collector Improper Logging Restriction VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-40129Cisco Common Services Platform Collector SQL Injection VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-41278Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectorsedgexfoundry app-functions-sdk-go · github.com/edgexfoun… +2
- CVE-2021-37322GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
- CVE-2021-43017Adobe Creative Cloud DLL Hijacking Local Application Denial of ServiceAdobe GoCart
- CVE-2021-23197Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the accountGallagher Command Centre
- CVE-2021-42525Adobe Animate SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Animate
- CVE-2021-42268Adobe Animate FLA File Parsing Null Pointer Dereference Application Denial of ServiceAdobe Animate
- CVE-2021-40761Adobe After Effects NULL Pointer Dereference Application Denial of ServiceAdobe After Effects
- CVE-2021-40756Adobe After Effects NULL Pointer Dereference Application Denial of ServiceAdobe After Effects
- CVE-2021-37939It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, whichElastic Kibana · kibana
- CVE-2021-37938It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path, which would load .pbf fileElastic Kibana
- CVE-2021-43669A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0.github.com/hyperledger/fabric
- CVE-2021-43668Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered.github.com/ethereum/go-ethereum
- CVE-2021-43667A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0.github.com/hyperledger/fabric
- CVE-2021-0671In apusys, there is a possible memory corruption due to a missing bounds check.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0670In apusys, there is a possible memory corruption due to a use after free.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0669In apusys, there is a possible memory corruption due to a use after free.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0668In apusys, there is a possible memory corruption due to incorrect error handling.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0667In apusys, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0666In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0665In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0664In ccu, there is a possible memory corruption due to a use after free.MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6…
- CVE-2021-0659In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT…
- CVE-2021-0658In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0657In apusys, there is a possible out of bounds write due to a stack-based buffer overflow.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0656In edma driver, there is a possible memory corruption due to a use after free.MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT…
- CVE-2021-0655In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check.MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893
- CVE-2021-0629In mdlactl driver, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893, MT8…
- CVE-2021-0624In flv extractor, there is a possible out of bounds read due to a heap buffer overflow.MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, M…
- CVE-2021-0623In asf extractor, there is a possible out of bounds read due to an integer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0622In asf extractor, there is a possible out of bounds read due to a heap buffer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0621In asf extractor, there is a possible out of bounds read due to an integer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0620In asf extractor, there is a possible out of bounds read due to a heap buffer overflow.MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6…
- CVE-2021-0619In ape extractor, there is a possible out of bounds read due to a missing bounds check.MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6…
- CVE-2021-0672In Browser app, there is a possible information disclosure due to a missing permission check.Android
- CVE-2021-27023A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a difPuppet Enterprise, Puppet Server, Puppet Agent · puppet
- CVE-2021-27025A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service conditPuppet Enterprise, Puppet Agent · puppet
- CVE-2021-27026A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be loggedPuppet Enterprise, Puppet Connect
- CVE-2021-27024A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to accessPuppet Continuous Delivery for Puppet Enterprise
- CVE-2021-43549OSIsoft PI Web APIOSIsoft PI Web API