CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
hibagentUbuntuhibagent updateNo score- duetdisplay duet display, duet display for windows 10+ +1 moreArbitrary code execution in Duet Display7.8 High
- zscaler client connectorDisable Zscaler using machine tunnel restart4.9 Medium
- dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2022, 3dswymer 3dexperience 2023 +2 moreStored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x5.4 Medium
- dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2022, 3dswymer 3dexperience 2023 +2 moreStored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x5.4 Medium
- gandhihitesh9 post meta data managerPost Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion4.3 Medium
- wago 0852-0602 firmware, 0852-0603 firmware, 0852-1605 firmware +3 more +5 moreWAGO: OS Command Injection Vulnerability in Managed Switch9.8 Critical
- axis os, os 2022 +1 moreDuring internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...7.6 High
- axis os, os 2018, os 2020 +1 more +3 moreSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup...7.1 High
- axis os, os 2020, os 2022 +2 moreSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...7.1 High
- axis os, os 2022 +1 moreSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...7.1 High
- zephyrproject zephyrbt: hci: DoS and possible RCE8.3 High
- libtiff, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreLibtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c3.3 Low
- mitsubishi electric corporation gx works2Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to...2.5 Low
- mitsubishi electric corporation gx works2Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to...2.5 Low
- pytorch serve, torchserve +1 moreTorchServe ZipSlip5.3 Medium
- red lion controls st-ipm-6350, st-ipm-8460, vt-ipm2m-113-d +9 more +11 moreRed Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel10.0 Critical
- red lion controls st-ipm-6350, st-ipm-8460, vt-ipm2m-113-d +9 more +11 moreRed Lion Controls Sixnet RTU Exposed Dangerous Method Or Function10.0 Critical
- owncloud, owncloud server +1 moreAn issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify,...9.8 Critical
- owncloud oauth2An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is...8.7 High
- owncloud graphapi, graph api +1 moreAn issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1....10.0 Critical
- nayem-howlader sup online shoppingCross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary...5.4 Medium
- eyoucmseyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive...5.4 Medium
- ipinfusion zebos, f5 big-ip global traffic manager, big-ip local traffic manager +3 more +5 moreThe BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a...7.5 High
- armanidrisi dev blog, dev blog blog +1 moreDev Blog v1.0 - Stored XSS5.4 Medium
- armanidrisi dev blog, dev blog blog +1 moreDev Blog v1.0 - ATO9.1 Critical
- nc3 testing platform, nc3-lu testingplatform +1 moreAbility to DoS the testing infrastructure by overwriting files9.1 Critical
- bookstackBook Stack v23.10.2 - LFR via Blind SSRF6.5 Medium
- tenable nessus, nessus agent +1 moreAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on...6.8 Medium
- tenable nessusArbitrary File Write6.8 Medium
- texas instruments cc32xx, simplelink msp432e4xx, simplelink-cc13xx +8 more +10 moreTexas Instruments TI-RTOS Integer Overflow or Wraparound7.4 High
- texas instruments cc32xx, simplelink msp432e4xx, simplelink-cc13xx +8 more +10 moreTexas Instruments TI-RTOS Integer Overflow or Wraparound7.4 High
- ays-pro popup boxPopup Box < 3.7.9 - Admin+ Stored XSS4.8 Medium
- dguzun article analyticsArticle Analytics <= 1.0 - Unauthenticated SQL injection9.8 Critical
- incsub forminatorForminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- premio mystickymenu, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 moremyStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion5.4 Medium
- s-sols seraphinite acceleratorSeraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect5.4 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion5.4 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion5.4 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.8 - Unauthenticated SQLi9.8 Critical
- s-sols seraphinite acceleratorSeraphinite Accelerator < 2.20.29 - Reflected XSS6.1 Medium
- allurewebsolutions wp post popupWP Post Popup <= 3.7.3 - Admin+ Stored XSS4.8 Medium
- miguel sirvent magic embedsMagic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode5.4 Medium
- bdaia woohoo newspaper magazine theme, unknown woohoo +1 moreWooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF8.8 High
- calliko bonus for wooBonus for Woo < 5.8.3 - Reflected Cross-Site Scripting6.1 Medium
- pubydocPubyDoc <= 2.0.6 - Admin+ Stored XSS4.8 Medium
- fivestarplugins five star restaurant menu, rustaurius five star restaurant menu and food ordering +1 moreFive Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection9.8 Critical
- nextauth.js next-authnext-auth vulnerable to possible user mocking that bypasses basic authentication5.3 Medium
- epiph embed privacy, epiphyt embed-privacy +1 moreEmbed Privacy missing escaping for show_all attribute in opt-out shortcode6.3 Medium
- xwiki, xwiki-contrib application-admintools +1 moreXWiki Admin Tools Application CSRF with QueryOnXWiki allows arbitrary database queries8.8 High
- Show moreLoading…