Archive

24 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /24 December 2021 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.3

CVE-2021-34423

Buffer overflow in Zoom client and other products

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for int…

Zoom Video Communications Zoom On-Premise Meeting Connector MMR Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) Zoom On-Premise Recording Connector Linux Windows Android macOS iOS Browsers

Nov 24, 2021
High 8.6

CVE-2021-36916

WordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated SQL injection (SQLi) vulnerability

The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function "hmwp_get_user_ip" tries to retrieve the IP address from multiple headers, …

wpWave Hide My WP (WordPress plugin) Web / CMS

Nov 24, 2021
High 8.1

CVE-2021-42306

Azure Active Directory Information Disclosure Vulnerability

An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential  on an Azure AD Application or Service Principal (which is not recommended). This vulne…

Microsoft Azure Active Directory Azure Automation Azure Migrate

Nov 24, 2021