Archive

10 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /10 December 2021 →

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

Medium 5.7

CVE-2021-3572 Public exploit

Improper Input Validation in pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

python-pip pip python-pip Debian Ubuntu PyPI

Nov 10, 2021
Critical 9.8

CVE-2021-3064 Public exploit EPSS 20%

PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The atta…

Palo Alto Networks PAN-OS Prisma Access Network devices

Nov 10, 2021
High 8.1

CVE-2021-3060 Public exploit EPSS 33%

PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root us…

Palo Alto Networks PAN-OS Prisma Access Network devices

Nov 10, 2021
Unscored —

CVE-2021-43136 Public exploit EPSS 16%

An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtai…

Nov 10, 2021
High 8.8

CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2019 Cumulative Update 10

Nov 10, 2021
KEV Nov 17, 2021
High 7.8

CVE-2021-42292 Exploited Public exploit EPSS 43%

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Nov 10, 2021
KEV Nov 17, 2021
High 7.5

CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
High 7.5

CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
Medium 4.3

CVE-2021-41351 Public exploit

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Microsoft Edge (Chromium-based) in IE Mode Browsers

Nov 10, 2021
Medium 6.5

CVE-2021-41349 Public exploit EPSS 93%

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22

Nov 10, 2021
High 8.8

CVE-2021-38666 Public exploit EPSS 15%

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021