CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
sudoTuxCare,sudo-develTuxCare +1 moresudo: Fix of CVE-2023-23240No score- px4 px4-autopilot, dronecode px4 drone autopilot +1 moreGlobal Buffer Overflow leading to denial of service in PX4-Autopilot2.9 Low
- kyvernoDenial of service from malicious manifest in kyverno6.1 Medium
- kyvernoDenial of service from malicious image manifest in kyverno3.1 Low
- kyvernoDenial of service from malicious image manifest in kyverno3.1 Low
- kyvernoDenial of service from malicious signature in kyverno6.1 Medium
- humansignal label studio, label-studio +1 moreObject Relational Mapper Leak Vulnerability in Filtering Task in Label Studio7.5 High
- duncanmcclean guest-entries, guest entries +1 moreRemote code execution via file uploads in guest-entries8.8 High
- intelbras rx 1500, rx 1500 firmware +1 moreIntelbras RX 1500 SSID WiFi.html cross site scripting2.4 Low
- maiwei safety production control platformMaiwei Safety Production Control Platform unrestricted upload5.3 Medium
- haoqisir baidu tongji generator, baidu-tongji-generator project baidu-tongji-generator +1 moreWordPress Baidu Tongji generator Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- dream-theme the7WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)6.1 Medium
- vadimk extra user detailsWordPress Extra User Details Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- tagdiv composerWordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
containerized-data-importeropenSUSESecurity update for containerized-data-importerNo scorecontainerized-data-importeropenSUSESecurity update for containerized-data-importerNo score- maiwei safety production control platformMaiwei Safety Production Control Platform Intelligent Monitoring ha.html information disclosure5.3 Medium
- maiwei safety production control platformMaiwei Safety Production Control Platform GetItemList information disclosure5.3 Medium
- shenzhen youkate industrial facial love cloud payment system, szjocat facial love cloud platform +1 moreShenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management7.3 High
- icssolution ics business managerCross-site Scripting on ICSSolution ICS Business Manager6.3 Medium
- icssolution ics business managerSQL Injection on ICSSolution ICS Business Manager9.4 Critical
pcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntryNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuiteNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::computeChecksumNo scorelibredwgOSS-FuzzHeap-buffer-overflow in bit_read_fixedNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in parse_by_block_typeNo scorepcapplusplusOSS-FuzzNegative-size-param in pcpp::RawPacket::insertDataNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFieldsNo scoreloopdevcrates.io`loopdev` crate is unmaintained; use 'loopdev-3` instead.No score- cyberws cleverwise daily quotesWordPress Cleverwise Daily Quotes Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- lionscripts webmaster toolsWordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- hanwha vision co., ltd. pnv-a6081r, hanwhavision pno-a6081r-e1t firmware, pno-a6081r-e2t firmware +1 more +3 moreCommand injection via wave install file7.2 High
- hanwha vision co., ltd. a-series, q-series, pnm-series camera, hanwhavision ane-l6012r, ane-l6012r firmware +226 more +228 moreAuthenticated Command Injection7.1 High
- powr, powr custom form builder, contact forms, payment forms, surveys, polls +1 morePOWR <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- mdempfle advanced iframeAdvanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- auto login new user after registration project login new user after registration, jeff sherk auto login new user after registration +1 moreWordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- phoeniixx custom my account for woocommerceWordPress Custom My Account for Woocommerce Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- stark digital category post list widgetWordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- flamescorpion auto affiliate linksWordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- phonepe, phonepe payment solutions +1 moreWordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)5.8 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)7.1 High
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)4.1 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 moreWordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)6.4 Medium
- dimitar ivanov http headersWordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Server Side Request Forgery (SSRF)4.4 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)5.5 Medium
- ays-pro poll maker – best wordpress poll plugin, poll maker, poll maker team maker – best wordpress poll plugin +2 moreWordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)4.4 Medium
- remarshal-project remarshalRemarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack7.5 High
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)4.1 Medium
- webpushr web push notifications, webpushr web push notifications web push notifications – webpushr +1 moreWordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)8.8 High
- Show moreLoading…