November 2021
Published in November 2021
- unknownJenkins Security Advisory 2021-11-12jenkins
- known exploitedCVE-2010-5326
- unknownJenkins Security Advisory 2021-11-04jenkins
- known exploitedpublic exploitCVE-2012-0158
- criticalexploitedCVE-2019-5544: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2012-3152
- criticalexploitedCVE-2020-17496: vBulletin PHP Module Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2014-1812
- criticalexploitedCVE-2020-6207: SAP Solution Manager Missing Authentication for Critical Function Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2015-1641
- criticalexploitedCVE-2020-6287: SAP NetWeaver Missing Authentication for Critical Function Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2015-4852
- criticalexploitedCVE-2021-1906: Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerabilitycisa-kev
- known exploitedCVE-2016-0167
- criticalexploitedCVE-2021-22894: Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-0185
- criticalexploitedCVE-2021-21148: Google Chromium V8 Heap Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-3235
- criticalexploitedCVE-2021-30633: Google Chromium Indexed DB API Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-3643
- criticalexploitedCVE-2021-22986: F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-3715
- criticalexploitedCVE-2020-8193: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-3718
- criticalexploitedCVE-2018-0171: Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-3976
- criticalexploitedCVE-2020-3452: Cisco ASA and FTD Read-Only Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-4437
- criticalexploitedCVE-2021-28663: Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-7255
- criticalexploitedCVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerabilitycisa-kev
- known exploitedCVE-2016-9563
- criticalexploitedCVE-2021-27562: Arm Trusted Firmware Out-of-Bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-0143
- criticalexploitedCVE-2021-20090: Arcadyan Buffalo Firmware Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-0199
- criticalexploitedCVE-2021-30762: Apple iOS WebKit Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-11774
- criticalexploitedCVE-2020-11738: WordPress Snap Creek Duplicator Plugin File Download Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-11882
- criticalexploitedCVE-2020-4006: Multiple VMware Products Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-16651
- criticalexploitedCVE-2021-21972: VMware vCenter Server Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-5638
- criticalexploitedCVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-6327
- criticalexploitedCVE-2020-24557: Trend Micro Multiple Products Improper Access Control Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-7269
- criticalexploitedCVE-2017-9248: Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-8759
- criticalexploitedCVE-2019-18988: TeamViewer Desktop Bypass Remote Login Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-9248
- criticalexploitedCVE-2017-6327: Symantec Messaging Gateway Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-9805
- criticalexploitedCVE-2020-12271: Sophos SFOS SQL Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-9822
- criticalexploitedCVE-2021-20023: SonicWall Email Security Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-0171
- criticalexploitedCVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-0296
- criticalexploitedCVE-2019-16256: SIMalliance Toolbox Browser Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-0798
- criticalexploitedCVE-2020-11652: SaltStack Salt Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-0802
- criticalexploitedCVE-2020-10221: rConfig OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-11776
- criticalexploitedCVE-2019-18935: Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-13379
- criticalexploitedCVE-2020-6819: Mozilla Firefox And Thunderbird Use-After-Free Vulnerabilitycisa-kev
- known exploitedCVE-2018-14558
- criticalexploitedCVE-2020-1147: Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-15811
- criticalexploitedCVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-15961
- criticalexploitedCVE-2020-0601: Microsoft Windows CryptoAPI Spoofing Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-18325
- criticalexploitedCVE-2020-0674: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-20062
- criticalexploitedCVE-2015-1641: Microsoft Office Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-2380
- criticalexploitedCVE-2012-0158: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-4878
- criticalexploitedCVE-2019-1215: Microsoft Windows Privilege Escalation Vulnerabilitycisa-kev
- known exploitedCVE-2018-4939
- criticalexploitedCVE-2021-36942: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-6789
- criticalexploitedCVE-2019-0797: Microsoft Win32k Privilege Escalation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-7600
- criticalexploitedCVE-2019-0803: Microsoft Win32k Privilege Escalation Vulnerabilitycisa-kev
- known exploitedCVE-2018-8653
- criticalexploitedCVE-2020-1020: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0211
- criticalexploitedCVE-2020-0938: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0541
- criticalexploitedCVE-2021-31955: Microsoft Windows Kernel Information Disclosure Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0604
- criticalexploitedCVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0708
- criticalexploitedCVE-2020-4427: IBM Data Risk Manager Security Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0797
- criticalexploitedCVE-2020-4430: IBM Data Risk Manager Directory Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0803
- criticalexploitedCVE-2021-21220: Google Chromium V8 Improper Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0808
- criticalexploitedCVE-2021-21224: Google Chromium V8 Type Confusion Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0859
- criticalexploitedCVE-2021-38003: Google Chromium V8 Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-0863
- criticalexploitedCVE-2021-38000: Google Chromium Intents Improper Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-11510
- criticalexploitedCVE-2020-6418: Google Chromium V8 Type Confusion Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-11539
- criticalexploitedCVE-2021-37975: Google Chromium V8 Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-11580
- criticalexploitedCVE-2021-30551: Google Chromium V8 Type Confusion Vulnerabilitycisa-kev
- known exploitedCVE-2019-11634
- criticalexploitedCVE-2020-16013: Google Chromium V8 Incorrect Implementation Vulnerabililtycisa-kev
- known exploitedCVE-2019-1214
- criticalexploitedCVE-2021-30632: Google Chromium V8 Out-of-Bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-1215
- criticalexploitedCVE-2020-15999: Google Chrome FreeType Heap Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-13608
- criticalexploitedCVE-2020-16010: Google Chrome for Android UI Heap Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-1367
- criticalexploitedCVE-2018-13379: Fortinet FortiOS SSL VPN Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-1429
- criticalexploitedCVE-2021-35464: ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-15752
- criticalexploitedCVE-2021-22205: GitLab Community and Enterprise Editions Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-15949
- criticalexploitedCVE-2018-0296: Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerabilitycisa-kev
- known exploitedCVE-2019-16256
- criticalexploitedCVE-2019-1653: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-1653
- criticalexploitedCVE-2020-3161: Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-16759
- criticalexploitedCVE-2020-3580: Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-17026
- criticalexploitedCVE-2021-30761: Apple iOS WebKit Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-17558
- criticalexploitedCVE-2021-30663: Apple Multiple Products WebKit Integer Overflow Vulnerabilitycisa-kev
- known exploitedCVE-2019-18187
- criticalexploitedCVE-2021-30665: Apple Multiple Products WebKit Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-18935
- criticalexploitedCVE-2021-30666: Apple iOS WebKit Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-18988
- criticalexploitedCVE-2021-30661: Apple Multiple Products WebKit Storage Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-19356
- criticalexploitedCVE-2021-1879: Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-19781
- criticalexploitedCVE-2021-1870: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-20085
- criticalexploitedCVE-2021-30858: Apple iOS, iPadOS, macOS Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-2215
- criticalexploitedCVE-2018-11776: Apache Struts Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-3396
- criticalexploitedCVE-2020-0069: Mediatek Multiple Chipsets Insufficient Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-3398
- criticalexploitedCVE-2020-0041: Android Kernel Out-of-Bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-4716
- criticalexploitedCVE-2019-2215: Android Kernel Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-5544
- criticalexploitedCVE-2016-4437: Apache Shiro Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-5591
- criticalexploitedCVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2019-6223
- criticalexploitedCVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-7481
- criticalexploitedCVE-2019-1367: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-8394
- criticalexploitedCVE-2018-0798: Microsoft Office Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-9082
- criticalexploitedCVE-2021-34527: Microsoft Windows Print Spooler Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-9978
- criticalexploitedCVE-2017-7269: Microsoft Windows Server Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0041
- criticalexploitedCVE-2021-30563: Google Chromium V8 Type Confusion Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0069
- criticalexploitedCVE-2021-21206: Google Chromium Blink Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0601
- criticalexploitedCVE-2021-30554: Google Chromium WebGL Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0646
- criticalexploitedCVE-2021-37973: Google Chromium Portals Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0674
- criticalexploitedCVE-2016-3976: SAP NetWeaver Directory Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0683
- criticalexploitedCVE-2020-16846: SaltStack Salt Shell Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0688
- criticalexploitedCVE-2020-11651: SaltStack Salt Authentication Bypass Vulnerabilitycisa-kev
- known exploitedCVE-2020-0878
- criticalexploitedCVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0938
- criticalexploitedCVE-2020-6820: Mozilla Firefox And Thunderbird Use-After-Free Vulnerabilitycisa-kev
- known exploitedCVE-2020-0968
- criticalexploitedCVE-2019-0808: Microsoft Win32k Privilege Escalation Vulnerabilitycisa-kev
- known exploitedCVE-2020-0986
- criticalexploitedCVE-2020-1054: Microsoft Win32k Privilege Escalation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-10148
- criticalexploitedCVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerabilitycisa-kev
- known exploitedCVE-2020-10181