CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
pcapplusplusOSS-FuzzNegative-size-param in pcpp::RawPacket::insertDataNo score- bvrp software slmailInsertion of Sensitive Information into Externally-Accessible File or Directory in BVRP Software SLmail7.5 High
- bvrp software slmailCross-site Scripting in BVRP Software SLmail6.1 Medium
- bvrp software slmailPath Traversal in BVRP Software SLmail6.5 Medium
opensslcrates.io`openssl` `X509StoreRef::objects` is unsoundNo score- digital ant e-commerce software, kc group e-commerce software project group e-commerce software +1 moreXSS in KC Group's E-Commerce Software6.1 Medium
- apache stormApache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files5.5 Medium
- medart health services notification panelSQLi in Medart Notification Panel9.8 Critical
- hikvision localservicecomponentsAn attacker could exploit a vulnerability by sending crafted messages to computers installed with...8.1 High
- hikvision localservicecomponentsThere is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to...9.1 Critical
- veribaseSQLi in Veribilim's Veribase9.8 Critical
- dell command\|monitor, command monitor (dcm) +1 moreDell Command | Monitor versions prior to 10.10.0, contain an improper access control...7.3 High
- hikvision ds-7104ni-q1\(c\) firmware, ds-7104ni-q1\(d\) firmware, ds-7108ni-q1\(c\) firmware +96 more +98 moreThere is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If...7.4 High
- dell command\|configure, command configure (dcc) +1 moreDell Command | Configure versions prior to 4.11.0, contain an improper access control...7.3 High
- dell command\|configure, command configure (dcc) +1 moreDell Command | Configure, versions prior to 4.11.0, contains an improper access control...7.3 High
- dell os recovery toolDell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access...7.3 High
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...7.8 High
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...7.8 High
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD...9.8 Critical
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...9.8 Critical
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used...9.8 Critical
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used...9.8 Critical
- codeigniter shieldCleartext Storage of Sensitive Information in codeigniter4/shield5.0 Medium
- codeigniter shieldInsertion of Sensitive Information into Log in codeigniter4/shield5.0 Medium
- liquidweb restrict content, stellarwp membership plugin – restrict content +1 moreWordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure5.3 Medium
- usedeskUsedesk before 1.7.57 allows profile stored XSS.5.4 Medium
- usedeskUsedesk before 1.7.57 allows filter reflected XSS.6.1 Medium
- usedeskUsedesk before 1.7.57 allows chat template injection.9.8 Critical
- ironmansoftware powershell universalThe API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to...8.8 High
- node-openssl project node-opensslopenssl npm package vulnerable to command execution9.8 Critical
- glewlwyd sso server project sso serverscheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2...9.8 Critical
- bouncycastle bouncy castle for java, fips java api +1 moreBouncy Castle Denial of Service (DoS)5.5 Medium
- clickhouseAn issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability...6.5 Medium
- clickhouseAn issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP...7.5 High
- booster for woocommerce, pluggabl booster for woocommerce +1 moreWordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure6.5 Medium
- switchwp wp client reportsWordPress WP Client Reports Plugin <= 1.0.16 is vulnerable to Sensitive Data Exposure4.3 Medium
- poporon pz-linkcardWordPress Pz-LinkCard Plugin <= 2.4.8 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- implecode ecommerce product catalog plugin for wordpress, ecommerce product catalog +1 moreWordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ari soft stream quiz – wordpress quizzes builder, ari-soft ari stream quiz +1 moreWordPress ARI Stream Quiz Plugin <= 1.2.32 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jeroen schmit theater for wordpressWordPress Theater for WordPress Plugin <= 0.18.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- assorted[chips] drawit (draw.io), assortedchips drawit +1 moreWordPress DrawIt (draw.io) Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- codez quick call buttonWordPress Quick Call Button Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jannis thuemmig email encoderWordPress Email Encoder Bundle Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- mmrs151 daily prayer timeWordPress Daily Prayer Time Plugin <= 2023.10.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- charitable donations & fundraising team donation forms by charitable, wpcharitable charitable +1 moreWordPress Charitable Plugin <= 1.7.0.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- venutius bp profile shortcodes extraWordPress BP Profile Shortcodes Extra Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- bmicalculator bmi calculator, waterloo plugins bmi calculator plugin +1 moreWordPress BMI Calculator Plugin Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- grandslambert better rss widgetWordPress Better RSS Widget Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- bamboo mcr columnsWordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…