CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- easycorp zentaoA Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create...5.4 Medium
- smartmodules facebookconversiontrackingplusIn the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" ...7.5 High
- sangoma freepbxSangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to...8.8 High
- rcos submittySubmitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any...5.3 Medium
- rcos submittySubmitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a...6.1 Medium
- openimageioBuffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute...9.8 Critical
- insyde insydeh2oAn issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5....5.5 Medium
- insyde insydeh2o, insydeh20 +1 moreAn SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in...7.8 High
- lycorp line mini appAn information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access...7.5 High
- lycorp line mini appAn information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access...7.5 High
- lycorp line mini appAn information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and...7.5 High
- lycorp line mini appAn information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain...7.5 High
- lycorp line mini appAn information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access...7.5 High
- lycorp line mini appAn information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access...7.5 High
- lycorp line mini appAn information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access...7.5 High
- lycorp line mini appAn information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access...7.5 High
- tangyh lamp-cloudDromara Lamp-Cloud Use of Hard-coded Cryptographic Key9.8 Critical
- popojicmsPopojiCMS Web Config install.php cross site scripting2.6 Low
- code-projects online examination systemOnline Examination System v1.0 - Multiple Open Redirects6.1 Medium
- code-projects online examination systemOnline Examination System v1.0 - Multiple Open Redirects6.1 Medium
- code-projects online examination systemOnline Examination System v1.0 - Multiple Open Redirects6.1 Medium
linux-starfiveUbuntulinux-starfive vulnerabilitiesNo score- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in setup_async_work()6.5 Medium
- squid-cache squidSQUID-2023:4 Denial of Service in SSL Certificate validation8.6 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: slab-use-after-free write in txend due to race condition7.0 High
- devolutions serverImproper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and...5.3 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco...8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote...4.0 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA)...5.0 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA)...8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...6.1 Medium
- snort, cisco firepower threat defense software, umbrella insights virtual appliance +2 more +4 moreMultiple Cisco products are affected by a vulnerability in Snort access control policies that...5.8 Medium
- cisco identity services engine software, identity services engine +1 moreA vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker...8.8 High
- cisco identity services engine software, identity services engine +1 moreA vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker...6.0 Medium
- devolutions remote desktop managerImproper access control in the password analyzer feature in Devolutions Remote Desktop Manager...9.8 Critical
- cisco firepower management center, firepower threat defense software, secure firewall management center +1 more +3 moreCisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability8.2 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA)...6.8 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single...6.1 Medium
- Show moreLoading…