CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- samsung open source oneA vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web...4.5 Medium
- samsung open source oneA vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web...9.8 Critical
- samsung open source oneA vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL...9.9 Critical
- dstar2018 agencydstar2018 Agency search.php cross site scripting3.5 Low
- qualcomm ar8035 firmware, csr8811 firmware, immersive home 214 platform firmware +113 more +115 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm ar8035 firmware, csr8811 firmware, immersive home 214 platform firmware +114 more +116 moreNULL Pointer dereference in WLAN Firmware7.5 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6900 firmware +115 more +117 moreBuffer over-read in WLAN Firmware7.5 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +176 more +178 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6800 firmware +134 more +136 moreBuffer Copy Without Checking Size of Input in WLAN Firmware9.8 Critical
- qualcomm ar8035 firmware, qam8255p firmware, qam8650p firmware +76 more +78 moreImproper Input Validation in Core9.0 Critical
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +82 more +84 moreBuffer Copy without Checking Size of Input in Audio6.7 Medium
- qualcomm aqt1000 firmware, ar9380 firmware, csr8811 firmware +206 more +208 moreBuffer Over-read in WLAN HAL6.1 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +86 more +88 moreBuffer Over-read in WLAN HAL6.1 Medium
- qualcomm aqt1000 firmware, csrb31024 firmware, fastconnect 6200 firmware +123 more +125 moreBuffer Over-read in WLAN HAL6.1 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +228 more +230 moreBuffer Over-read in IOE Firmware6.1 Medium
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +224 more +226 moreImproper Authorization in HLOS7.1 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +202 more +204 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS8.2 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +269 more +271 moreImproper Authentication in Core8.4 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +227 more +229 moreUse of Out-of-range Pointer Offset in Multi-mode Call Processor9.8 Critical
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, qca6391 firmware +22 more +24 moreImproper Input Validation in Core9.3 Critical
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +7 more +9 moreThe improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version...5.5 Medium
- microweber, microweber microweber/microweber +1 moreImproper Access Control in microweber/microweber4.6 Medium
trapperkeeper-webserver-jetty9-clojureDebiantrapperkeeper-webserver-jetty9-clojure - security updateNo score- tenda ax1806 firmwareTenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by...9.1 Critical
- tenda ax1806 firmwareTenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which...9.1 Critical
- urbackup serverUrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message...5.3 Medium
- bootboxjs bootboxBootbox.js Cross Site Scripting vulnerability6.1 Medium
- boltwireAn issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a...9.1 Critical
- gpacBuffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local...5.5 Medium
- silbersaiten order duplicatorIn the module "Order Duplicator " Clone and Delete Existing Order" (orderduplicate) in version <=...8.8 High
- advanced export products orders cron csv excel project export products orders cron csv excelInsecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers...7.5 High
- tenda rx9 pro firmwareA buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an...7.1 High
- tenda rx9 pro firmwareMissing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows...8.1 High
- midori-global better pdf exporterLocal File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira...7.8 High
- tykBlind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to...9.8 Critical
- tykBlind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access...9.8 Critical
- wondercmsCross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to...6.1 Medium
- remoteclinic remote clinicRemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET...9.8 Critical
- remoteclinic remote clinicRemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote...8.8 High
- remoteclinic remote clinicRemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.9.8 Critical
- remoteclinic remote clinicRemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.9.8 Critical
- opayweb opayAn Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be...7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability6.5 Medium
- microsoft onenote, office 2019, office ltsc 2021 +3 more +5 moreMicrosoft OneNote Spoofing Vulnerability4.6 Medium
- kaizencoders url shortifyURL Shortify < 1.7.9.1 - Admin+ Stored XSS4.8 Medium
- awesomesupport awesome supportAwesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion8.1 High
- atomicwebstrategy woocommerce ninja forms product add-onsWooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload9.8 Critical
- ninjaforms ninja forms, unknown ninja forms contact form +1 moreNinja Forms < 3.6.34 - Admin+ Stored XSS4.8 Medium
- sarveshmrao wp discord inviteWP Discord Invite < 2.5.2 - Admin+ Stored Cross Site Scripting4.8 Medium
- topcode simple table managerWP Simple Table Manager Plugin <= 1.5.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- Show moreLoading…