CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- openlinksw virtuosoA stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of...7.5 High
- eyoucmsA stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to...4.8 Medium
- eyoucmsA stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to...4.8 Medium
- eyoucmsA stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to...4.8 Medium
- gl-inet gl-ax1800 firmwareInsecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker...9.8 Critical
- iteachyou dreamer cmsIn Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File...7.5 High
- iteachyou dreamer cmsDreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template...9.1 Critical
- tenda ac10 firmwareTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10 firmwareTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10 firmwareTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10, ac10 firmware +1 moreTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10 firmwareTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10 firmwareTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- zumtobel netlink ccd firmwareZumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow...7.5 High
- zumtobel netlink ccd firmwareZumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection...9.8 Critical
- zumtobel netlink ccd firmwareZumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials...9.8 Critical
- cryptography.io cryptographycryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Medium
- bd facschorusIncorrect User Management3.2 Low
- bd facschorusOverly Permissive Access Policy4.1 Medium
- bd facschorusHardcoded Secrets4.1 Medium
- bd facschorusLack of DMA Access Protections2.4 Low
- bd facschorusUnsecure Identity Verification3.8 Low
- bd facschorusLack of Adequate BIOS Authentication5.2 Medium
- bd facschorusLack of USB Whitelisting5.4 Medium
- simplesamlphp xml-security, saml2 +1 moreValidation of SignedInfo6.8 Medium
- zediious raptor-webCross-Site Scripting vulnerability in raptor-web 0.4.45.4 Medium
ec2-hibinit-agentUbuntuec2-hibinit-agent updateNo score- apache supersetApache Superset: Lack of rate limiting allows for possible denial of service5.8 Medium
- solarwinds platformSolarWinds Platform SQL Injection Remote Code Execution Vulnerability8.0 High
- apache supersetApache Superset: Sensitive information disclosure on db connection details4.3 Medium
- apache supersetApache Superset: Open Redirect Vulnerability4.8 Medium
- facebook katranKatran could disclose non-initialized kernel memory as part of an IP header. The issue was...7.5 High
- apache tomcatApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 High
- apache activemqApache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE8.8 High
- m-files serverIncorrect calculation of effective permissions5.4 Medium
popplerUbuntupoppler regressionNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::TLSECPointFormatExtension::getECPointFormatListNo scorelibxaacOSS-FuzzGlobal-buffer-overflow in iaace_estimate_scfs_chanNo score- grupo alumne alumne lmsCross-Site Scripting in Alumne LMS5.4 Medium
- univera panoramaCommand Injection in Univera Panorama Framework8.8 High
- ibm security guardiumIBM Security Guardium CSV injection8.0 High
- eskom computer e-municipality module, eskom e-belediye +1 moreInformation Disclosure in Eskom E-municipality7.5 High
- eskom computer e-municipality module, eskom e-belediye +1 moreInformation Disclosure in Eskom E-municipality7.5 High
- spring boot, vmware spring boot +1 moreSpring Boot server Web Observations DoS Vulnerability5.3 Medium
- broadcom reactor nettyReactor Netty HTTP Server Metrics DoS Vulnerability5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework server Web Observations DoS Vulnerability5.3 Medium
- idemia morphowave compact/xp, morphowave sp, morphowave compact firmware +9 more +11 moreStored Cross Site Scripting in webserver administration8.1 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code Execution8.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code Execution8.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code Execution8.8 High
- Show moreLoading…