CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
apache-commons-codecOSS-FuzzSecurity exception in java.base/java.util.HashMap.resizeNo score- creativemindssolutions cm on demand search and replace, cminds cm search and replace +1 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dell powerprotect agent for file systemPowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default...4.0 Medium
- rustcrypto rsaRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels5.9 Medium
- unitree robotics a1, unitree a1 firmware +1 moreMissing Authentication for Critical Function in Unitree Robotics A15.7 Medium
- botanik software pharmacy automationInformation Disclosure in Botanik Software Pharmacy Automation7.5 High
- unitree robotics a1, unitree a1 firmware +1 moreAuthentication Bypass by Spoofing in Unitree Robotics A18.0 High
- fortra digital guardian agentSaved Uninstall Key in Digital Guardian Agent Uninstaller6.0 Medium
- drd drdriveSQLi in DRDrive9.8 Critical
- m-files serverImproper Permission Handling in M-Files Server4.3 Medium
- m-files serverM-Files REST API allows Denial of Service5.7 Medium
- elastic elasticsearchElasticsearch Improper Handling of Exceptional Conditions6.5 Medium
- apache submarineApache Submarine: SQL injection from unauthorized login9.8 Critical
- dece geodiStored XSS in Geodi5.4 Medium
- dece software geodiFunction Bypass in Geodi7.1 High
- userproplugin userproUserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcode6.5 Medium
- userproplugin userproUserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposure6.1 Medium
- autodesk customer portalAutodesk Customer Support Portal allows cases created by users under an account to see cases...4.3 Medium
- autodesk customer portalAutodesk users who no longer have an active license for an account can still access cases for...5.3 Medium
- autodesk desktop connectorA maliciously crafted DLL file can be forced to install onto a non-default location, and attacker...7.8 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator cross-site request forgery4.3 Medium
- elastic elasticsearchElasticsearch privilege escalation5.9 Medium
- elastic apm java agentAPM Java Agent Local Privilege Escalation7.0 High
- elastic apm .net agentElastic APM .NET Agent information disclosure2.1 Low
- elastic kibanaKibana Reporting vulnerabilities6.6 Medium
- fuji electric tellus lite v-simulatorFuji Electric Tellus Lite V-Simulator Stack-based Buffer Overflow7.8 High
- fuji electric tellus lite v-simulatorFuji Electric Tellus Lite V-Simulator Out-of-bounds Write7.8 High
- fuji electric tellus lite v-simulatorFuji Electric Tellus Lite V-Simulator Improper Access Control7.3 High
- elastic kibanaKibana path traversal issue3.1 Low
- elastic kibanaKibana code execution issue6.6 Medium
torDebiantor - security updateNo score- getgrav dom-sanitizerCross-site Scripting in DOMSanitizer6.1 Medium
- nzbgetNZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and...8.8 High
- zohocorp manageengine recoverymanager plusZoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary...7.2 High
- giflib project giflibBuffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain...7.1 High
- zlib-ng minizip-ngBuffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute...8.8 High
- zlib-ng minizip-ngBuffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute...8.8 High
- bytecodealliance webassembly micro runtimeAn heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3...7.5 High
- jeecg bootDirectory Traversal in jeecg-boot6.5 Medium
- mercedes-benz mercedes meAn access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the...5.3 Medium
- mercedes-benz mercedes meAn access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the...5.3 Medium
- admidioCross-site Scripting in Admidio6.1 Medium
- swiftyeditCross Site Request Forgery in SwiftyEdit8.8 High
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows...5.4 Medium
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT...8.8 High
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Cross Site Scripting (XSS) via Uncontrolled File...5.4 Medium
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal.5.4 Medium
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential...6.5 Medium
- m-privacy mprivacy-tools, tightgatevnc +1 moreIn mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the...6.5 Medium
- m-privacy mprivacy-tools, rsbac-policy-tgpro, tightgatevnc +2 moreIn mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11...8.8 High
- Show moreLoading…