CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- os4ed opensisThe Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control...9.8 Critical
- os4ed opensisThe Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read...7.5 High
- tenda ac18 firmware, ac19 firmware, ac6 firmware +1 more +3 moreBuffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a...9.8 Critical
libavcOSS-FuzzHeap-buffer-overflow in ih264d_sevNo score- wiresharkBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark7.8 High
- yoast local premium, local seo +1 moreWordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- arshid easy hide loginWordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- tradebooster video xml sitemap generatorWordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- essential addons for elementor pro, wpdeveloper essential addons for elementor pro, essential addons for elementor +2 moreWordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)5.4 Medium
- kaine wise chatWordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- himanshu parashar google site verification plugin using meta tagWordPress Google Site Verification plugin using Meta Tag Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- tomas wordpress tooltipsWordPress WordPress Tooltips Plugin <= 8.2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- patreon wordpressWordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- codemshop mshop my site, 코드엠샵 마이사이트 – mshop my site +1 moreWordPress MSHOP MY SITE Plugin <= 1.1.6 is vulnerable to Broken Access Control5.4 Medium
- wc product table woocommerce product table liteWordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- droitthemes droit dark modeWordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- rednao donations made easy – smart donations, donations made easy - smart donations +1 moreWordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- labib ahmed image hover effects – wordpress plugin, webdevocean image hover effects +1 moreWordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- user local inc userheat pluginWordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- james mehorter device theme switcherWordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- metagauss profilegrid, profilegrid – user profiles, memberships, groups and communities +1 moreWordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- pricelisto best restaurant menu by pricelisto, best restaurant menu +1 moreWordPress Best Restaurant Menu by PriceListo Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- peter sterling add local avatarWordPress Add Local Avatar Plugin <= 12.1 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- rico-macchi wp links pageWordPress WP Links Page Plugin <= 4.9.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- marco milesi anac xml bandi di garaWordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- edward plainview plainview protect passwordsWordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- code snippets pro snippets, codesnippetspro code snippets +1 moreWordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mammothology wp full stripe freeWordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site Request Forgery (CSRF) vulnerability on every Setting Save4.3 Medium
- icansoft korea snsWordPress Korea SNS Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gopi ramasamy vertical scroll recent post, gopiplus vertical scroll recent registered user +1 moreWordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- swashata wp category post list widgetWordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- lukman nakib preloader matrixWordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- ibm cics tx advanced, cics tx +1 moreIBM CICS TX Advanced information disclosure5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server privilege escalation8.1 High
libxaacOSS-FuzzIndex-out-of-bounds in iaace_calc_sfb_distNo scoreserenityOSS-FuzzHeap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytesNo scorehann-rs-servicecrates.io`hann-rs-service` was removed from crates.io for malicious codeNo scoreopenvpn-plugin-rscrates.io`openvpn-plugin-rs` was removed from crates.io for malicious codeNo scorewindowsservicecrates.io`windowsservice` was removed from crates.io for malicious codeNo score- strangerstudios paid memberships pro, paid memberships pro – content restriction, user registration, & paid subscriptions +1 morePaid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- apppresser, scottopolis apppresser – mobile app framework +1 moreAppPresser <= 4.2.5 - Insecure Password Reset Mechanism8.1 High
- color demoiccmaxIn International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in...6.5 Medium
- iteachyou dreamer cmsDreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF...8.8 High
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- opencrxCross-site Scripting in OpenCRX6.1 Medium
- Show moreLoading…