CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- yt-dlpGeneric Extractor MITM Vulnerability in yt-dlp5.0 Medium
- absolute software secure access, ivanti secure access client +1 moreWhen a particular process flow is initiated, an attacker may be able to gain unauthorized...7.8 High
- ivanti epmm, endpoint manager mobile +1 moreA security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with...9.1 Critical
- ivanti epmm, endpoint manager mobile +1 moreA security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older...9.8 Critical
- ivanti secure access linux, secure access client +1 moreA logged in user can modify specific files that may lead to unauthorized changes in system-wide...5.3 Medium
- ivanti secure access client, secure access client windows +1 moreWhen a specific component is loaded a local attacker and is able to send a specially crafted...8.8 High
- ivanti secure access client, secure access client windows +1 moreWhen a specific component is loaded a local attacker and is able to send a specially crafted...8.8 High
- ivanti secure access clientA vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow...8.8 High
- phoenix securecore™ technology™ 4, phoenixtech securecore technology +1 moreImproper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows...8.4 High
- zoom rooms, zoom video communications, inc. rooms for macos +1 moreImproper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an...7.8 High
- zoom rooms, zoom video communications, inc. rooms for macos +1 moreLink following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to...7.8 High
- zoom, zoom communications inc. clients, zoom meetings +2 more +4 moreImproper authorization in some Zoom clients may allow an authorized user to conduct an escalation...5.5 Medium
- zoom, zoom communications inc. clients, zoom meetings +1 more +3 moreInsufficient control flow management in some Zoom clients may allow an authenticated user to...3.5 Low
- zoom, zoom communications inc. clients, zoom meetings +2 more +4 moreCryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to...4.9 Medium
- zoom, zoom communications inc. clients, zoom meetings +3 more +5 moreBuffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of...3.7 Low
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreAn authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful...4.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreAn authenticated vulnerability has been identified allowing an attacker to effectively establish...5.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....7.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed...7.5 High
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, satellite 6.14 for rhel 8 +3 more +5 moreHub: insecure galaxy-importer tarfile extraction6.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service...7.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed...7.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the...7.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the...7.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's...8.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI ...8.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's...8.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere is a buffer overflow vulnerability in the underlying AirWave client service that could lead...9.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are buffer overflow vulnerabilities in the underlying CLI service that could lead to...9.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are buffer overflow vulnerabilities in the underlying CLI service that could lead to...9.8 Critical
- zoom, zoom communications inc. clients, zoom meetings +2 more +4 moreImproper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to...4.3 Medium
- zoom, zoom communications inc. clients, zoom meetings +3 more +5 moreBuffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of...4.3 Medium
- zoom, zoom virtual desktop infrastructure, zoom video communications, inc. rooms client for windows and zoom vdi client +2 moreUncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom...4.3 Medium
- zoom rooms, zoom video communications, inc. rooms client for windows and zoom vdi client, zoom virtual desktop infrastructure +2 moreUntrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged...3.1 Low
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- matthew muro restrict categoriesWordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- michael uno (miunosoft) responsive column widgetsWordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- statamic cms, statamic +1 moreRemote code execution via form uploads in statamic/cms8.8 High
- photo feed feed, photofeed photo feed +1 moreWordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- microsoft asp.net core, .net 8.0, asp.net core 8.0 +5 more +7 moreASP.NET Core Denial of Service Vulnerability8.2 High
- codebard codebard's patron button and widgets for patreon, patron button and widgets for patreon +1 moreWordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- ami aptiov, aptio v +1 moreImproper input validation in BIOS TCG27.5 High
- ami aptiov, aptio v +1 moreImproper input validation in BIOS OFBD7.5 High
- ami aptiov, aptio v +1 moreImproper input validation in BIOS7.5 High
- sajjad hossain sagor wp edit usernameWordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- wpdevart countdown and countup, woocommerce sales timer, countdown and countup\, woocommerce sales timer +1 moreWordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- vantage6vantage6 Node accepts non-whitelisted algorithms from malicious server7.2 High
- atarim, atarim visual website collaboration, feedback & project management – atarim +1 moreWordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)7.1 High
- kyvernoAttacker can cause Kyverno user to unintentionally consume insecure image7.1 High
- Show moreLoading…