CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- f-secure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow a Denial of Service because scanning a crafted file takes a...5.3 Medium
- precisionbridge precision bridgePrecision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity...9.1 Critical
- perl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl: perl for windows binary hijacking vulnerability7.8 High
- perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 morePerl: write past buffer end via illegal user-defined unicode property7.0 High
ntopngOSS-FuzzHeap-buffer-overflow in NetworkInterface::dissectPacketNo score- robinbuschmann robinbuschmann/sequelize-typescript, sequelizejs sequelize-typescript +1 morePrototype Pollution in robinbuschmann/sequelize-typescript7.5 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: out-of-memory in tiffopen via a craft file6.5 Medium
- cjvnjde google-translate-api-browser, google translate api browser +1 moreServer-Side Request Forgery (SSRF) Vulnerability in google-translate-api-browser3.7 Low
- warp-tech warpgateUser authorization bug leading to privilege escalation in warpgate7.1 High
- louislam uptime-kuma, uptime.kuma uptime kuma +1 moreAttribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma6.3 Medium
eth-abiPyPIEthereum ABI decoder DoS when parsing ZST4.3 Medium- clastix capsule-proxyAuthentication bypass using an empty token in capsule-proxy9.8 Critical
- tongda oa 2017, tongda2000 tongda office anywhere +1 moreTongda OA 2017 delete.php sql injection6.3 Medium
- totvs fluig, fluig platform +1 moreTOTVS Fluig Platform mobileredir openApp.jsp cross site scripting3.5 Low
- byzoro smart s80, smart s80 firmware +1 moreByzoro Smart S80 PHP File updatelib.php unrestricted upload6.3 Medium
libavcOSS-FuzzHeap-buffer-overflow in ih264d_format_convertNo scorelibavcOSS-FuzzHeap-buffer-overflow in isvcd_start_of_picNo scorelibavcOSS-FuzzHeap-buffer-overflow in ih264d_format_convertNo scorelibavcOSS-FuzzHeap-buffer-overflow in isvcd_populate_res_prmsNo score- checkmkCSRF in delete_user_message3.5 Low
fdo-clientSUSESecurity update for fdo-clientNo scorefdo-clientopenSUSESecurity update for fdo-clientNo scorefdo-clientopenSUSESecurity update for fdo-clientNo scorefdo-clientSUSESecurity update for fdo-clientNo score- apache dolphinschedulerApache dolphinscheduler sensitive information disclosure7.5 High
- dell rvtoolsRVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the...7.5 High
- openzfsOpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that...7.5 High
- layer5 mesherySQL injection vulnerability in Meshery9.8 Critical
- sysaidSysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a...6.5 Medium
- ibm qradar wincollect agent, qradar wincollect +1 moreIBM QRadar WinCollect Agent improper output encoding3.3 Low
- ibm qradar wincollect agent, qradar wincollect +1 moreIBM QRadar WinCollect Agent information disclosure2.7 Low
- omnisend email marketing for woocommerce by omnisend, email marketing for woocommerce +1 moreWordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure5.3 Medium
- themeisle cloud templates & patterns collection, cloud templates \& patterns collection +1 moreWordPress Cloud Templates & Patterns collection Plugin <= 1.2.2 is vulnerable to Sensitive Data Exposure5.3 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c7.0 High
- artica pandora fms, pandora fms fms +1 moreUploading executables via the file manager5.7 Medium
- artica pandora fms, pandora fms fms +1 moreStored XSS Via Site News Page5.3 Medium
- artica pandora fms, pandora fms fms +1 moreStored XSS Via Dashboard Panel4.0 Medium
- artica pandora fms, pandora fms fms +1 moreArbitrary File Read As Root Via GoTTY Page8.5 High
- artica pandora fms, pandora fms fms +1 moreLinux Local Privilege Escalation Via GoTTY Page9.1 Critical
- artica pandora fms, pandora fms fms +1 moreMisassignment of privileges can cause DOS attack8.2 High
- artica pandora fms, pandora fms fms +1 moreLack of Authorization and Stored XSS Via SNMP Trap Editor Page5.9 Medium
- artica pandora fms, pandora fms fms +1 moreLack of Authorization and Stored XSS Via Translation Abuse8.4 High
- artica pandora fms, pandora fms fms +1 moreTraversal Path on PHP file7.6 High
- artica pandora fms, pandora fms fms +1 moreUnauthenticated Admin Account Takeover Via XSS7.6 High
- artica pandora fms, pandora fms fms +1 moreRemote Code Execution via File Uploader7.6 High
- artica pandora fms, pandora fms fms +1 moreArbitrary File Read6.0 Medium
- artica pandora fms, pandora fms fms +1 moreDatabase backups availability by low-privileged users6.8 Medium
- bos ip camera, neutron ipc2224-sr3-npf-36 firmware, ipc2624-sr3-npf-36 firmware +15 more +17 morePath Traversal in Neutron IP Camera7.5 High
- artica pandora fms, pandora fms fms +1 moreUnauthenticated Admin Account Takeover Via Cron Log File Backups7.0 High
wiresharkOSS-FuzzGlobal-buffer-overflow in dissect_zcl_read_attr_structNo score- Show moreLoading…