CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- oss-calendar oss calendarSQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote...8.8 High
firefoxUbuntufirefox regressionsNo score- papercut ng, ng, papercut mf, mf +2 morePrivilege Escalation Vulnerability7.8 High
- sap se netweaver as java, sap netweaver application server java +1 moreInformation Disclosure in NetWeaver AS Java Logon5.3 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform5.3 Medium
- sap business oneImproper Access Control vulnerability in SAP Business One product installation9.6 Critical
- datahub-project datahubSession Expiration Misconfiguration in datahub4.2 Medium
- datahub-project datahubPrivilege escalation through email sign-up in datahub7.1 High
- cesium cesiumjsCross-site Scripting in cesium6.1 Medium
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability...8.8 High
- gpacMP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the...5.5 Medium
- abbott id now firmwareIn Abbott ID NOW before 7.1, settings can be modified via physical access to an internal serial...5.2 Medium
- code-projects inventory managementSQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute...7.8 High
- code-projects inventory managementSQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute...5.5 Medium
- code-projects inventory managementCross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute...5.4 Medium
- phpgurukul teacher subject allocation management systemCross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation...4.8 Medium
- phpgurukul teacher subject allocation management systemSQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation...4.9 Medium
- phpgurukul teacher subject allocation management systemSQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management...7.5 High
- code-projects simple task listSQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers...6.5 Medium
- code-projects blood bankSQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run...7.8 High
- gibbonedu gibbonGibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess...6.1 Medium
- gibbonedu gibbonGibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template...7.2 High
- gibbonedu gibbonGibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager...5.4 Medium
- gibbonedu gibbonGibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because...9.8 Critical
- northern.tech cfengineNorthern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18...7.5 High
- memberscard project memberscardAn issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via...7.5 High
- golden project goldenAn issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the...7.5 High
- emudhra emsignerIncorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows...9.8 Critical
- emudhra emsignerIncorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows...7.5 High
- emudhra emsignerInsecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized...6.5 Medium
- netgate pfsenseCross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to...5.4 Medium
- netgate pfsense, pfsense plus +1 moreAn issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a...8.8 High
- netgate pfsenseCross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to...5.4 Medium
- mikrotik routerosMikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in...5.3 Medium
- microsoft .net, asp.net core, .net 6.0 +10 more +12 moreASP.NET Core Security Feature Bypass Vulnerability6.2 Medium
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability7.6 High
- optimizely cmsOptimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- tenda ax1803 firmwareBuffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run...8.8 High
- grandplugins direct checkout – quick view – buy now for woocommerce, woo quick view and buy now +1 moreWordPress Direct Checkout – Quick View – Buy Now For WooCommerce Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- goldbroker.com live gold price & silver price charts widgets, goldbroker live gold price \& silver price charts widgets +1 moreWordPress Live Gold Price & Silver Price Charts Widgets Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- edward plainview plainview protect passwordsWordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- stefano ottolenghi post pay counterWordPress Post Pay Counter Plugin <= 2.784 is vulnerable to Cross Site Scripting (XSS)7.1 High
- qode interactive qi addons for elementorWordPress Qi Addons For Elementor Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- themepunch essential gridWordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- anton bond additional order filters for woocommerceWordPress Additional Order Filters for WooCommerce Plugin <= 1.10 is vulnerable to Cross Site Scripting (XSS)7.1 High
- scribit shortcodes finderWordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- gravity master product enquiry for woocommerceWordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fmahmood star cloudprnt for woocommerceStar CloudPRNT for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting6.1 Medium
- wp event manager – events calendar, registrations, sell tickets with woocommerce, wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +2 moreWordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…