CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- 10web seo, seo by 10web +1 moreWordPress Seo By 10Web Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- acurax under construction / maintenance mode from acurax, under construction \/ maintenance mode +1 moreWordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wishfulthemes raise mag, wishful blog +1 moreWordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS)7.1 High
- scott paterson easy paypal shopping cartWordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- codeboxr cbx map for google map & openstreetmap, cbx map +1 moreWordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- marco milesi anac xml bandi di garaWordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- marco milesi anac xml viewerWordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- averta master slider pro, master slider +1 moreWordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ioannup edit woocommerce templatesWordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- so wp pinyin slugsWordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gravity master product enquiry for woocommerceWordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fmahmood star cloudprnt for woocommerceWordPress Star CloudPRNT for WooCommerce Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: local dos vulnerability in scatterwalk_copychunks4.7 Medium
sharpnpm,@rootio/sharpRoot +1 moresharp vulnerability in libwebp dependency CVE-2023-48637.8 High- xenx86: BTC/SRSO fixes not fully effective4.7 Medium
- xenx86/AMD: mismatch in IOMMU quarantine page table levels5.5 Medium
- redhat libnbd, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreLibnbd: malicious nbd server may crash libnbd5.3 Medium
- adobe premiere proZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe premiere proZDI-CAN-21792: Adobe Premiere Pro MP4 File Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- adobe premiere proZDI-CAN-21766: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe premiere proZDI-CAN-21767: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe premiere proZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe premiere proZDI-CAN-21764: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ray project ray, ray-project ray-project/ray +1 moreRay Command Injection in cpu_profile Parameter9.8 Critical
- ray project ray, ray-project ray-project/ray +1 moreRay Log File Local File Include7.5 High
- prefect, prefecthq prefecthq/prefect +1 moreCross-Site Request Forgery (CSRF) in prefecthq/prefect8.8 High
- h2o, h2oai h2oai/h2o-3 +1 moreH2O Local File Include9.3 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreH2O S3 Bucket Takeover8.7 High
- h2o, h2oai h2oai/h2o-3 +1 moreLocal File Inclusion in h2oai/h2o-39.3 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreH2O Remote Code Execution via POJO Model Import10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File Upload10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File Write10.0 Critical
- vertaai modeldb, vertaai/modeldb +1 moreModelDB Local File Include8.6 High
- adobe incopyAdobe InCopy Out-of-Bounds Read Vulnerability v1.07.8 High
- adobe auditionZDI-CAN-21685: Adobe Audition MP4 File Parsing Uninitialized Variable Remote Code Execution Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21689: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21684: Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21690: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21688: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21686: Adobe Audition M4A File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21782: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21683: Adobe Audition MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability5.5 Medium
- adobe auditionZDI-CAN-21687: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +9 more +11 moreKernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get4.3 Medium
- adobe media encoderZDI-CAN-21789: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe media encoderZDI-CAN-21698: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe media encoderZDI-CAN-21696: Adobe Media Encoder MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe media encoderZDI-CAN-21697: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe media encoderZDI-CAN-21699: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe bridgeZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…