CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- huawei emui, harmonyos +1 moreVulnerability of input parameters being not strictly verified in the input. Successful...5.3 Medium
- huawei emui, harmonyos +1 moreUnauthorized startup vulnerability of background apps. Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of background app permission management in the framework module. Successful...5.3 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of uncaught exceptions in the NFC module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of uncaught exceptions in the NFC module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreRace condition vulnerability in the kernel module. Successful exploitation of this vulnerability...5.9 Medium
- huawei emuiVulnerability of parameters being out of the value range in the QMI service module. Successful...7.5 High
- huawei emui, harmonyos +1 moreSecurity vulnerability in the face unlock module. Successful exploitation of this vulnerability...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of missing encryption in the card management module. Successful exploitation of...7.5 High
- freebsdIncorrect libcap_net limitation list manipulation7.5 High
- freebsdlibc stdio buffer overflow9.8 Critical
- apache software foundation uima java sdk core, uima java sdk cpe, uima java sdk tools +2 more +4 moreApache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats8.8 High
- samsung ue40d7000, ue40d7000 firmware +1 moreSamsung Smart TV UE40D7000 WPS DoS attack3.5 Low
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the Booster module. Impact: Successful...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability...7.5 High
- huawei emui, harmonyos +1 moreUse-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreMulti-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of identity verification being bypassed in the face unlock module. Successful...9.1 Critical
- red hat jboss enterprise application platform, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +3 more +5 moreWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor6.5 Medium
- webidsupport webidWeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.9.8 Critical
- microweberMicroweber Cross-site Scripting vulnerability5.4 Medium
- timeteccloud auto web-based database management systemCross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive...5.4 Medium
- jbig2enc project jbig2encjbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512.5.5 Medium
- jbig2enc project jbig2encjbig2enc v0.28 was discovered to contain a heap-use-after-free via...5.5 Medium
- couchbase serverAn issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while...7.5 High
- axiosAxios Cross-Site Request Forgery Vulnerability6.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor,...7.1 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor,...7.1 High
- broadcom clarityJaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload...5.4 Medium
- couchbase serverCouchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.7.5 High
- pfsenseAn issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via...9.8 Critical
- spiceworks help desk serverAn issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL...9.9 Critical
- yugabyte yugabytedbLog Injection6.5 Medium
rusty-pasetocrates.iorusty_paseto vulnerable to private key extraction due to ed25519-dalek dependencyNo score- yugabyte yugabytedb, yugabytedb anywhere +1 morePrometheus Metrics Accessible Pre-Authentication5.3 Medium
- projectworlds online matrimonial projectOnline Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online matrimonial projectOnline Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online matrimonial projectOnline Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online matrimonial projectOnline Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online matrimonial projectOnline Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online matrimonial projectOnline Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- codeastro online job portalOnline Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- codeastro online job portalOnline Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- updraftplus, davidanderson updraftplus: wp backup & migration plugin +1 moreUpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update5.4 Medium
- gara amazonifyAmazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- Show moreLoading…