CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- adobe bridgeZDI-CAN-21797: Adobe Bridge MP4 File Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe bridgeZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V.5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability II.5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability I.5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability IV.5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI.5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability III.7.8 High
- cksource ckeditorCross-Site Scripting vulnerability in CKSource CKEditor6.1 Medium
openvpnUbuntuopenvpn vulnerabilitiesNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecordNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayerNo scorevulkan-loaderOSS-FuzzUNKNOWN READ in loader_logNo scoreopenscOSS-FuzzHeap-buffer-overflow in epassNUMBER_pkcs15_generate_keyNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFieldsNo scorephpOSS-FuzzUNKNOWN WRITE in php_strip_url_passwdNo score- wireshark, debian linux +1 moreOut-of-bounds Read in Wireshark6.3 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability VII.5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability V.5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability I5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability VIII.5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability IX.5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability III.5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability II.5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21930: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21925: (bypass of VULN-24891) Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21956: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21882: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21424: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21493: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-22041: Adobe Acrobat Reader DC AcroForm Doc Object Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21971: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21422: Adobe Acrobat Reader DC AcroForm value Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21931: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21509: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability7.8 High
- trellix getsuspAn Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27...6.5 Medium
- dell repository manager, repository manager (drm) +1 moreDell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in...6.7 Medium
- dell repository manager, repository manager (drm) +1 moreDell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in...6.7 Medium
- dell os recovery toolDell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access...7.3 High
- dell encryption, endpoint security suite enterprise, security management server +1 more +3 moreDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server...4.6 Medium
- apache hadoopPrivilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems7.5 High
- dell precision 5820 tower, dell precision 7820 tower, dell precision 7920 tower, precision 5820 firmware, precision 7820 firmware +1 more +3 moreDell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally...7.5 High
- dell e-lab navigator, mobility - e-lab navigator +1 moreDell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local...8.4 High
- first co., ltd. cfr-4eab, cfr-8eab, cfr-16eab, c-first cfr-1004ea firmware, cfr-1008ea firmware +36 more +38 moreFirst Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated...9.8 Critical
- Show moreLoading…