CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: role pg_signal_backend can signal certain superuser processes.2.2 Low
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 morePostgresql: buffer overrun from integer overflow in array modification8.8 High
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: memory disclosure in aggregate function calls4.3 Medium
- robert schulz (sprd.net ag) spreadshop plugin, spreadshop +1 moreWordPress Spreadshop Plugin Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- superbthemes superb social media share buttons and follow buttons, suplugins superb social media share buttons and follow buttons for wordpress +1 moreWordPress Superb Social Media Share Buttons and Follow Buttons Plugin <= 1.1.3 is vulnerable to Broken Access Control5.3 Medium
- presstigers simple job boardWordPress Simple Job Board Plugin <= 2.10.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- tribulant newslettersWordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- recorp export wp page to static html/css, myrecorp export wp page to static html\/css +1 moreWordPress Export WP Page to Static HTML/CSS Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- browserupdate wp browserupdateWordPress WP BrowserUpdate Plugin <= 4.4.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
self_cellcrates.ioInsufficient covariance check makes self_cell unsoundNo score- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read printing error messages6.2 Medium
- digitaldruid hoteldruidCross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote...6.1 Medium
toropenSUSESecurity update for torNo score- volkswagen id.3, id.3 firmware +1 moreDoS and Control of Volume Settings for VW ID.3 ICAS3 IVI ECU5.7 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- froxlor, froxlor froxlor/froxlor +1 moreImproper Link Resolution Before File Access in froxlor/froxlor9.9 Critical
- natus sleepworks, neuroworks eeg +1 moreNatus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the...9.8 Critical
- sysaid, sysaid server, on-premises +2 moreIn SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after...9.8 Critical
- wbce cmsSQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote...9.8 Critical
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability7.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.3 High
- ibenic simple giveaways, igor benic simple giveaways – grow your business, email lists and traffic with contests +1 moreWordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- faraz quazi floating action button, floating action button project action button +1 moreWordPress Floating Action Button Plugin <=1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- chronosly events calendar, chronosly-events-calendar project chronosly-events-calendar +1 moreWordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- philips encoreanywherePhilips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor5.9 Medium
- roland barker, xnau webdesign participants databaseWordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- peepso community by peepso – social network, membership, registration, user profiles, peepso +1 moreWordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- criss swaim tpg redirectWordPress TPG Redirect Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- daniel powney multi ratingWordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- xtemos woodmart, woodmart - multipurpose woocommerce theme +1 moreWordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cyberwire pro mime types, sybre waaijer pro mime types – manage file media types +1 moreWordPress Pro Mime Types Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- getsentry sentry-javascript, sentry software development kit +1 moreSentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint9.3 Critical
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: duplicating a bigbluebutton activity assigns the same meeting id3.3 Low
- shortpixel adaptive images – webp, avif, cdn, image optimization, adaptive images +1 moreWordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- designs & code forget about shortcode buttonsWordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control5.3 Medium
- wp reactions, llc reactions lite, wpreactions wp reactions lite +1 moreWordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- palasthotel by edward bock, katharina rompf sunny search, fast-search-powered-by-solr project fast-search-powered-by-solr +1 moreWordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- benedict b., maciej gryniuk hyphenatorWordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gitlabIncorrect Authorization in GitLab8.1 High
- lokalyze call me nowWordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hamidrezasepehr custom cursors, web trendy wp custom cursors | wordpress cursor plugin +1 moreWordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- woocommerce product recommendationsWordPress WooCommerce Product Recommendations Plugin < 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- woocommerce automatewooWordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- woocommerce product add-ons, product addons +1 moreWordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- guillemant david wp full auto tags manager, guillemantdavid full auto tags manager +1 moreWordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- lws hide loginWordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- casier bbpress toolkitWordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption5.9 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: forum summary report shows students from other groups when in separate groups mode3.3 Low
- Show moreLoading…