Archive

9 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /9 December 2021 →

All Critical High Medium Low Exploited only Public exploit

71 results · Feed

Unscored —

CVE-2019-18914

A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection pa…

Nov 9, 2021
Medium 6.1

CVE-2021-3641

Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1…

Bitdefender GravityZone

Nov 9, 2021
Unscored —

CVE-2019-18916

A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Print…

Nov 9, 2021
Unscored —

CVE-2021-43519

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service vi…

darktable ceph ntopng emscripten Debian Ubuntu Azure Linux

Nov 9, 2021
Unscored —

CVE-2021-42026

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-42025

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-42021

A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2)…

Siemens Siveillance Video DLNA Server ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-42015

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 Mendix Applications using Mendix 7 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-40366

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM modul…

Siemens Climatix POL909 (AWM module) Climatix POL909 (AWB module) ICS / OT

Nov 9, 2021
Medium 5.5

CVE-2021-40364

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 U…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Nov 9, 2021
High 7.7

CVE-2021-40359

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPC…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Nov 9, 2021
Critical 9.9

CVE-2021-40358

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 U…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-37207

A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns imprope…

Siemens SENTRON powermanager V3 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31890

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31889

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31888

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31887

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31886

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31885

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) APOGEE PXC Compact (P2 Ethernet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31884

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens TALON TC Compact (BACnet) APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) ICS / OT

Nov 9, 2021
High 7.1

CVE-2021-31883

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 ICS / OT

Nov 9, 2021
Medium 6.5

CVE-2021-31882

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 ICS / OT

Nov 9, 2021
High 7.1

CVE-2021-31881

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 ICS / OT

Nov 9, 2021
High 8.2

CVE-2021-31346

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31345

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 PLUSCONTROL 1st Gen ICS / OT

Nov 9, 2021
Medium 5.3

CVE-2021-31344

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
Unscored —

CVE-2020-10054

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application d…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Nov 9, 2021
Unscored —

CVE-2020-10053

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application w…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Nov 9, 2021
Unscored —

CVE-2020-10052

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application w…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-43114

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RT…

fort-validator Debian

Nov 9, 2021
Critical 9.8

CVE-2021-43466

Template injection in thymeleaf-spring5

In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.

org.thymeleaf:thymeleaf-spring5 Maven

Nov 9, 2021