November 2021

11 results · Clear filters · Feed

• Critical 9.8
  CVE-2021-44077 Exploited Public exploit EPSS 94%

  Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014…

  Nov 29, 2021

  KEV Dec 1, 2021
• High 8.8
  CVE-2021-38003 Exploited Public exploit EPSS 39%

  Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Nov 23, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2021-38000 Exploited

  Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remot…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 23, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-44026 Exploited Public exploit EPSS 70%

  Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

  roundcube roundcube Debian Ubuntu
  Nov 19, 2021

  KEV Jun 22, 2023
• Critical 10.0
  CVE-2021-41277 Exploited Public exploit EPSS 97%

  GeoJSON URL validation can expose server files and environment variables to unauthorized users

  Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment varia…

  metabase metabase
  Nov 17, 2021

  KEV Nov 12, 2024
• High 8.8
  CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2019 Cumulative Update 10
  Nov 10, 2021

  KEV Nov 17, 2021
• High 7.8
  CVE-2021-42292 Exploited Public exploit EPSS 43%

  Microsoft Excel Security Feature Bypass Vulnerability

  Microsoft Excel Security Feature Bypass Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021
  Nov 10, 2021

  KEV Nov 17, 2021
• High 7.5
  CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• High 7.5
  CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• Medium 5.5
  CVE-2021-41379 Exploited · Ransomware EPSS 19%

  Windows Installer Elevation of Privilege Vulnerability

  Windows Installer Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 10, 2021

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2021-42237 Exploited · Ransomware Public exploit EPSS 98%

  Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where i…

  Nov 5, 2021

  KEV Mar 25, 2022