CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- warfareplugins social warfare, social sharing plugin – social warfare +1 moreSocial Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- 10web wd widgettwitterWD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- web-settler social feed, umarbajwa social feed | all social media in one place +1 moreSocial Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- gift up! up gift cards for wordpress and woocommerce, giftup gift up gift cards for wordpress and woocommerce +1 moreGift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- tryinteract interact: embed a quiz on your site, interact\ +1 moreInteract: Embed A Quiz On Your Site <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- bitly, bitlydeveloper bitly's wordpress plugin +1 moreBitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- cconover featured image captionFeatured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- apache ofbizApache OFBiz: Execution of Solr plugin queries without authentication5.3 Medium
- imagemapper project imagemapperImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title6.1 Medium
- imagemapper project imagemapperImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- imagemapper project imagemapperImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax4.3 Medium
- chandni patel wp mapitWP MapIt <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- imagemapper project imagemapperImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax5.4 Medium
- gravitydesign telephone number linkerTelephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- msyk fmdataapimsyk FMDataAPI FMDataAPI_Sample.php cross site scripting3.5 Low
- wpsolutions-hq wpdbspringcleanUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPSolutions-HQ WPDBSpringClean...7.1 High
- apache alluraApache Allura: sensitive information exposure via import4.9 Medium
- samsung easysetupUse of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11...6.3 Medium
- samsung passImproper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical...5.4 Medium
- samsung emailImproper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4...4.0 Medium
- comodo firewallImplicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in...4.4 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startSignIn in Samsung...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startNameValidationActivity...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startEmailValidationActivity...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in...5.5 Medium
- samsung phoneUse of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7...5.5 Medium
- samsung quick shareImproper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to...5.5 Medium
- samsung bixby voiceImproper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to...6.2 Medium
- samsung push serviceImproper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local...3.3 Low
- samsung push serviceImproper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10...4.0 Medium
- samsung accountImproper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows...4.0 Medium
- samsung healthPendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to...4.7 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1...5.9 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows...8.4 High
- samsung android, samsung mobile devices +1 moreAn improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows...8.4 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker...8.4 High
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows...6.3 Medium
- samsung android, samsung mobile devices +1 moreImproper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a...6.6 Medium
- samsung android, samsung mobile devices +1 moreImproper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows...6.2 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows...6.7 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023...5.6 Medium
- samsung android, samsung mobile devices +1 moreArbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1...6.7 Medium
- ec-cube, ec-cube co.,ltd. 3 series, 4 series +2 moreEC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2...7.2 High
- ziteboard, ziteboard online whiteboard +1 moreZiteboard Online Whiteboard <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ziteboard Shortcode6.4 Medium
- samsung open source oneA vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the...4.3 Medium
- Show moreLoading…