CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- online library management system project library management systemAn Arbitrary File Upload in the Upload Image component in SourceCodester Online Library...9.8 Critical
- admerc gym management systemStored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0...6.1 Medium
- kyocera ecosys m2640idw firmwareThe web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability,...6.1 Medium
- genexis platinum 4410 firmwareUPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 has an action ...6.5 Medium
- phpgurukul tourism management systemAn Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the...8.8 High
- simple grocery store sales and inventory sales project grocery store sales and inventory systemAn issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0....9.8 Critical
- online clothing store project clothing storeSourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image...9.8 Critical
- online clothing store project clothing storeSourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS)...6.1 Medium
- online clothing store project clothing storeSourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName...9.8 Critical
- gitlab, gitlab ce/ee +1 morePath traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8...7.1 High
- gitlab, gitlab ee +1 moreAn issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular...4.3 Medium
- gitlab, gitlab ee +1 moreAn issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required...5.7 Medium
- taskcafe project taskcafeCross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows...7.5 High
- gitlab, gitlab ce/ee +1 moreCSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able...3.1 Low
- kaaproject kaaCross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows...5.4 Medium
- gitlab, gitlab ce/ee +1 moreInsufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker...6.5 Medium
- apache openofficeA vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents...7.8 High
- fastadminIn fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a...7.2 High
- basetech ge-131 bt-1837836 firmwareA directory traversal vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows...7.5 High
- basetech ge-131 bt-1837836 firmwareCleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836...7.5 High
- limesurveyA stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1...5.4 Medium
- basetech ge-131 bt-1837836 firmwareUse of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921...9.8 Critical
- basetech ge-131 bt-1837836 firmwareA predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated...5.3 Medium
- basetech ge-131 bt-1837836 firmwareUnprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921...5.5 Medium
- basetech ge-131 bt-1837836 firmwareUse of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote...6.5 Medium
- resourcexpress qubi3 firmwareQED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access...4.6 Medium
- artworks gallery in php\, css\, javascript\, and mysql project gallery in php\, css\, javascript\, and mysqlThe edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows...8.8 High
- artworks gallery in php\, css\, javascript\, and mysql project gallery in php\, css\, javascript\, and mysqlThe add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows...8.8 High
- progress moveit transferIn Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload...5.4 Medium
- tobesoft xplatform, xplatform xplatformlib922.dll +1 moreTOBESOFT XPLATFORM arbitrary hta file execution vulnerability8.8 High
- y18n project y18n, oracle graalvm, siemens sinec infrastructure network services +2 morePrototype Pollution7.3 High
- brokenlamp slockSlock<T> allows sending non-Send types across thread boundaries8.1 High
- ticketed lock project lockData races in ticketed_lock8.1 High
- try-mutex project try-mutexData races in try-mutex5.5 Medium
- cisco security managerCisco Security Manager Path Traversal Vulnerability9.1 Critical
- cisco security managerCisco Security Manager Java Deserialization Vulnerabilities8.1 High
- cisco security managerCisco Security Manager Static Credential Vulnerability7.4 High
- binarynights forkliftBinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation...7.8 High
- binarynights forkliftBinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the...7.8 High
- keycloakCross-site Scripting in keycloak4.8 Medium
- micro focus idolPersistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version...4.8 Medium
- micro focus filrReflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1...5.4 Medium
- micro focus arcsight loggerArbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all...9.8 Critical
- micro focus arcsight loggerCross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version...6.1 Medium
- micro focus arcsight loggerCross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1....5.4 Medium
- gitlab, gitlab ce/ee +1 moreA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The...4.3 Medium
- gitlab, gitlab ce/ee +1 morePrivate group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is...3.7 Low
- gitlab gitalyGitaly Insufficient Session Expiration vulnerability2.5 Low
- gitlab, gitlab ce/ee +1 moreA vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above...4.7 Medium
- gitlab, gitlab ee +1 moreCertain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE...5.3 Medium
- Show moreLoading…