CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- evarisk digiriskThe Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...6.1 Medium
libredwgOSS-FuzzHeap-buffer-overflow in bit_read_RCNo scoreserenityOSS-FuzzHeap-buffer-overflow in OpenType::be_u32No score- neshan mapsWordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection6.0 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection8.5 High
- chris richardson mappress maps for wordpress, mappresspro mappress +1 moreWordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection7.1 High
- repute infosystems armemberWordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection8.2 High
- i13websolution video carousel slider with lightboxThe video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request...4.3 Medium
- seothemes seo sliderSEO Slider <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- bepopiacompliant be popia compliant, web-x be-popia-compliant +1 moreWordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection8.2 High
- zendrop, zendrop – global dropshipping +1 moreWordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection10.0 Critical
- paytm payment gatewayWordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection8.2 High
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation9.8 Critical
- code-projects simple photo galleryWordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection6.7 Medium
- wedevs wp project managerWordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection8.5 High
- carrcommunications rsvpmaker, davidfcarr rsvpmarker +1 moreWordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection8.2 High
- linux, linux kernel +1 moreksmbd: call rcu_barrier() in ksmbd_server_exit()5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd memory exhaustion denial-of-service vulnerability5.9 Medium
kubevirtopenSUSESecurity update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-containerNo score- wpn-xm serverstack, wpn-xm +1 moreImproper Neutralization of Input During Web Page Generation in WPN-XM Serverstack6.1 Medium
- wpn-xm serverstack, wpn-xm +1 moreInclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack7.5 High
- manageengine desktop central, zohocorp manageengine desktop central +1 moreServer-Side Request Forgery in ManageEngine Desktop Central6.6 Medium
- manageengine desktop central, zohocorp manageengine desktop central +1 moreImproper Neutralization of CRLF Sequences in ManageEngine Desktop Central6.1 Medium
- manageengine desktop central, zohocorp manageengine desktop central +1 moreImproper Neutralization of CRLF Sequences in ManageEngine Desktop Central6.1 Medium
- eclipse parssonParsson DoS when parsing numbers from untrusted sources5.9 Medium
- linux kernel, red hat enterprise linux 8, redhat enterprise linux +4 more +6 moreKpatch: mm/mremap.c: incomplete fix for cve-2022-412227.0 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreSquid: dos against http and https7.5 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in parse_lease_state()7.1 High
- eclipse glassfishGlassfish remote code execution6.8 Medium
- teamamaze teamamaze/amazefileutilities, amaze file utilities +1 moreImproper Authorization in teamamaze/amazefileutilities8.2 High
- wisdomgarden tronclass ilearnWisdomGarden Tronclass ilearn - Path Traversal6.5 Medium
- galaxy software services vitals esp, gss vitals enterprise social platform +1 moreGalaxy Software Services Vitals ESP - Arbitrary File Upload8.8 High
- ncsist mobile device manager, ncsist manageengine mdm +1 moreNCSIST ManageEngine MDM - Path Traversal7.5 High
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Improper Input Validation9.8 Critical
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information4.0 Medium
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements8.8 High
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Command Injection7.2 High
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Broken Access Control9.8 Critical
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts7.5 High
- asus rt-ax55, rt-ax55 firmware +1 moreASUS RT-AX55 - command injection - 48.8 High
- asus rt-ax55, rt-ax55 firmware +1 moreASUS RT-AX55 - command injection - 38.8 High
- asus rt-ax55, rt-ax55 firmware +1 moreASUS RT-AX55 - command injection - 28.8 High
- asus rt-ax55, rt-ax55 firmware +1 moreASUS RT-AX55 - command injection - 18.8 High
- ragic no-code database builder, enterprise cloud database +1 moreRagic No-Code Database Builder - Stored XSS5.4 Medium
- ibm content navigatorIBM Content Navigator server-side request forgery5.4 Medium
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.6 Medium
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.3 High
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- ibm mq applianceIBM MQ privilege escalation6.7 Medium
- frroutingAn issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP...7.5 High
- Show moreLoading…