CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn engineermode, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn engineermode, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn Ifaa service, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn Ifaa service, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. t760/t770/t820/s8000 +1 moreIn sim service, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn dm service, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn validationtools, there is a possible missing permission check. This could lead to local...5.5 Medium
- bitrix24Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload9.6 Critical
- bitrix24Bitrix24 Insecure Global Variable Extraction7.5 High
- bitrix24Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access7.5 High
- bitrix24Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution9.6 Critical
- bitrix24Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)9.0 Critical
- bitrix24Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)9.0 Critical
- bitrix24Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction8.8 High
- bitrix24Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation8.8 High
- dolibarr erp crm, erp\/crm +1 moreDolibarr ERP CRM (<= 17.0.3) Improper Access Control6.5 Medium
- dolibarr erp crm, erp\/crm +1 moreDolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE7.5 High
- hitachi energy esomsPoorly constructed webap requests and URI components with special characters trigger unhandled...5.3 Medium
- hitachi energy esomsThe responses for web queries with certain parameters disclose internal path of resources. This...5.3 Medium
- hitachi energy esomsThe response messages received from the eSOMS report generation using certain parameter queries...5.3 Medium
- hitachi energy mach system software, hitachienergy modular advanced control for hvdc +1 moreAuthenticated clients can read arbitrary files on the MAIN Computer system using the remote...2.7 Low
- hitachi energy mach system software, hitachienergy modular advanced control for hvdc +1 moreThe McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file...6.5 Medium
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - Stored in pkp/pkp-lib2.7 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - Stored in pkp/pkp-lib2.7 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting in pkp/pkp-lib3.5 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-Site Request Forgery in pkp/pkp-lib3.5 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-Site Request Forgery (CSRF) in pkp/pkp-lib4.3 Medium
- pkp pkp/pkp-lib, web application library +1 moreCross-Site Request Forgery (CSRF) in pkp/pkp-lib3.5 Low
- pkp pkp/pkp-lib, web application library +1 moreCross-Site Request Forgery (CSRF) in pkp/pkp-lib3.5 Low
- pkp pkp/customlocale, sfu customlocale +1 moreCross-Site Request Forgery (CSRF) in pkp/customLocale6.3 Medium
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - Stored in pkp/pkp-lib2.7 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - DOM in pkp/pkp-lib3.5 Low
- pkp pkp/ojs, sfu open journal systems +1 moreCross-site Scripting (XSS) - Stored in pkp/ojs3.5 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-Site Request Forgery (CSRF) in pkp/pkp-lib3.5 Low
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - Stored in pkp/pkp-lib5.4 Medium
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - Reflected in pkp/pkp-lib5.4 Medium
- pkp pkp/pkp-lib, sfu pkp web application library +1 moreCross-site Scripting (XSS) - Stored in pkp/pkp-lib4.6 Medium
- pkp pkp/pkp-lib, web application library +1 moreInsufficient Session Expiration in pkp/pkp-lib4.3 Medium
- Show moreLoading…