CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability7.6 High
- microsoft windows defender, windows defender antimalware platform +1 moreMicrosoft Windows Defender Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Security Feature Bypass Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Remote Registry Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Distributed File System (DFS) Remote Code Execution Vulnerability8.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +32 more +34 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Local Security Authority Subsystem Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Hyper-V Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +10 more +12 moreASP.NET Security Feature Bypass Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability7.8 High
- microsoft host integration server 2020, host integration server, ole db provider +2 moreMicrosoft Host Integration Server 2020 Remote Code Execution Vulnerability8.8 High
- lava-code lava directory managerWordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wp wham product visibility by country for woocommerceWordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreCode Injection in salesagility/suitecrm7.2 High
- salesagility salesagility/suitecrm, suitecrm +1 morePath Traversal: '\..\filename' in salesagility/suitecrm7.5 High
- salesagility salesagility/suitecrm, suitecrm +1 moreCross-site Scripting (XSS) - Reflected in salesagility/suitecrm6.8 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreUnrestricted Upload of File with Dangerous Type in salesagility/suitecrm5.4 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreCode Injection in salesagility/suitecrm4.3 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreCode Injection in salesagility/suitecrm5.4 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreServer-Side Request Forgery (SSRF) in salesagility/suitecrm5.0 Medium
- linux kernelUse-after-free in Linux kernel's netfilter: nf_tables component7.8 High
exiv2OSS-FuzzHeap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo scorentopngOSS-FuzzHeap-buffer-overflow in IEC104Stats::processPacketNo scorecpythoncrates.io`cpython` is unmaintainedNo score- siemens comosA vulnerability has been identified in COMOS (All versions). The affected application lacks...9.6 Critical
- siemens opc ua modelling editor (siome), opc ua modeling editor +1 moreA vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2...7.5 High
- siemens simatic pcs neoA vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored...5.4 Medium
- siemens simatic pcs neoA vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the...8.0 High
- siemens simatic pcs neoA vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of...6.3 Medium
- siemens simatic pcs neoA vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of...6.5 Medium
- siemens mendix, mendix applications using mendix 10, mendix applications using mendix 7 +2 more +4 moreA vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4...6.8 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +102 more +104 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...7.1 High
- siemens 6ag1206-2bb00-7ac2 firmware, 6ag1206-2bs00-7ac2 firmware, 6ag1208-0ba00-7ac2 firmware +126 more +128 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...9.4 Critical
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +103 more +105 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...3.7 Low
- siemens scalance xb205-3 (sc, pn), 6ag1206-2bb00-7ac2 firmware, 6ag1206-2bs00-7ac2 firmware +178 more +180 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...5.1 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +103 more +105 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...4.3 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +103 more +105 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...6.9 Medium
- siemens scalance xb205-3 (sc, pn), 6ag1206-2bb00-7ac2 firmware, 6ag1206-2bs00-7ac2 firmware +172 more +174 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...6.9 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +101 more +103 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...8.6 High
- siemens comosA vulnerability has been identified in COMOS (All versions). The affected application lacks...9.6 Critical
- siemens comosA vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used...9.6 Critical
- siemens comosA vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the...3.5 Low
- weston embedded uc-http, silabs gecko platform, gecko software development kit +1 more +3 moreA memory corruption vulnerability exists in the HTTP Server header parsing functionality of...9.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...9.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreAn out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded...7.7 High
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston...9.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality...9.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of...9.0 Critical
- yop poll, yop-poll yop poll +1 moreYOP Poll <= 6.5.26 - Race Condition to Vote Manipulation5.3 Medium
- Show moreLoading…