CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- arcserve udpArcserve UDP Unauthenticated RCE9.8 Critical
- control id idsecureControl iD iDSecure passwordCustom Authentication Bypass9.8 Critical
- unknown web push notificationsWebpushr < 4.35.0 - Unauthenticated Stored XSS5.4 Medium
- unknown martins free & easy seo backlink link building network, martinstools free \& easy link building +1 moreMartins Free & Easy SEO Link buildings < 1.2.30 - Reflected XSS6.1 Medium
- 10web booster, unknown 10web booster +1 more10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion9.1 Critical
- limitloginattempts limit login attempts reloadedLimit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update4.3 Medium
- drelton medialistMedialist < 1.4.1 - Contributor+ Stored XSS5.4 Medium
- s-sols seraphinite acceleratorSeraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import5.3 Medium
- gappointmentsAppointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS4.8 Medium
- unknown wordpress backup & migration, webtoffee backup and migration +1 moreWordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS5.4 Medium
- mediamanifesto mmm simple file listMmm Simple File List <= 2.3 - Contributor+ Stored XSS5.4 Medium
- unknown post smtp mailer, wpexperts post smtp +1 morePOST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting6.1 Medium
- levantoan woocommerce vietnam checkoutWoocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS6.1 Medium
- wpb show core project show core, unknown wpb-show-core +1 moreWPB Show Core <= 2.2 - Unauthenticated Local File Inclusion9.8 Critical
- wpb show core project show core, unknown wpb-show-core +1 moreWPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery9.8 Critical
- analytify simple social media share buttons, wpbrigade simple social buttons +1 moreSimple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access5.3 Medium
- unknown wordpress backup & migration, webtoffee backup and migration +1 moreWordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update4.3 Medium
- unknown wassup real time analytics, wassup real time analytics project real time analytics +1 moreWassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS6.1 Medium
- mediamanifesto mmm simple file list, mmm simple file list simple file list +1 moreMmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing4.3 Medium
- asgaros forum, unknown asgaros forum +1 moreAsgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload9.8 Critical
- lesterchan wp-useronlineWP-UserOnline < 2.88.3 - Unauthenticated Stored XSS6.1 Medium
- cleantalk security & malware scan by cleantalk, security \& malware scan +1 moreSecurity & Malware scan by CleanTalk < 2.121 - IP Spoofing7.5 High
- unknown job manager & career, themehigh job manager \& career +1 moreJob Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure7.5 High
- booking-wp-plugin bookly, unknown wordpress online booking and scheduling plugin +1 moreBookly < 22.5 - Admin+ Stored XSS4.8 Medium
- metagauss eventprimeEventPrime <= 3.2.9 - Booking Pricing Bypass5.3 Medium
- kamalkhan kk star ratingskk Star Ratings < 5.4.6 - Rating Tampering via Race Condition5.9 Medium
libtommathUbuntulibtommath vulnerabilityNo score- kingsoft wps office, wps office +1 moreAn uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreA code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356....8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreAn arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreAn arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreA type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreA use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreA use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature...8.8 High
- plesk, plesk installer +1 moreUncontrolled search path element vulnerability in Plesk6.3 Medium
- checkmk gmbh appliance, tribe29 checkmk appliance firmware +1 moreBackup password in GET parameter3.3 Low
openscOSS-FuzzStack-buffer-overflow in asn1_decode_entryNo scoreradare2OSS-FuzzStack-buffer-overflow in io_memory_readNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5O__shared_decodeNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- frhedBuffer Overflow vulnerability in Frhed7.3 High
- apache supersetApache Superset: Stored XSS on API endpoint4.3 Medium
- trellix application and change control, application and change control (tacc) +1 moreAn improper limitation of a path name to a restricted directory (path traversal) vulnerability...8.4 High
- apache supersetApache Superset: Unnecessary read permissions within the Gamma role4.3 Medium
- apache supersetApache Superset: Privilege escalation with default examples database6.3 Medium
- apache dolphinschedulerApache DolphinScheduler: Information Leakage Vulnerability7.5 High
- otrsPassword is send back to client8.1 High
- mattermostOpen redirect in /oauth/<service>/mobile_login?redirect_to=4.3 Medium
- mattermostInsecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards4.3 Medium
- mattermostPermalink previews displayed for posts in archived channels even if users are disallowed to view archived channels4.3 Medium
- Show moreLoading…