CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- loytec l-inx configuratorLOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. An admin...7.5 High
- loytec l-inx configuratorLOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext...7.5 High
- loytec l-inx configuratorLOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authentication, which transmits...7.5 High
- zstackZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these. This leads to privilege escalation.8.8 High
- gnu tarIn GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an...6.2 Medium
- systematica financial calculator, fix adapter, http adapter +3 more +5 moreAbsolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101...5.3 Medium
- sierrawireless aleosAceManager DOS Vulnerability7.5 High
- netgear prosafe network management systemNETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server7.8 High
- netgear prosafe network management systemNETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol9.8 Critical
- octobercms octoberOctober CMS safe mode bypass using Twig sandbox escape9.1 Critical
- octobercms octoberOctober CMS safe mode bypass using Page template injection4.9 Medium
- red hat single sign-on 7Keycloak: ldap injection on username input7.5 High
- zitadelZITADEL vulnerable account takeover via malicious host header injection8.1 High
- google androidRemote code execution9.8 Critical
- google androidElevation of privilege9.8 Critical
- google androidInformation disclosure7.5 High
- google androidElevation of privilege9.8 Critical
- google androidRemote code execution9.8 Critical
- google androidRemote code execution9.8 Critical
- octobercms octoberOctober CMS stored XSS by authenticated backend user with improper configuration5.4 Medium
- azukaar cosmos-server, cosmos-cloud cosmos server +1 moreJwttoken in Cosmos server never expires after password changed and logging out8.8 High
- misskeyMisskey's missing signature validation allows arbitrary users to impersonate any remote user.9.3 Critical
ec2-hibinit-agentUbuntuec2-hibinit-agent updateNo score- progress moveit transferMOVEit Transfer Group Admin Privilege Escalation7.2 High
- progress moveit transferMOVEit Transfer XSS via MOVEit Gateway7.1 High
drupal/xsendfilePackagistThe Xsendfile module enables fast transfer for private files in Drupal. In order to control private file downloads, the module overrides ImageStyleDownloadController, for which a vulnerability was dis…No score- carrierwave project carrierwaveCarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS6.8 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreJenkins NeuVector Vulnerability Scanner Plugin missing permission check4.3 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin, jenkins google compute engine +2 more +4 moreJenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins matlab, jenkins project matlab plugin +1 moreJenkins MATLAB Plugin XML External Entity vulnerability9.8 Critical
- jenkins matlab, jenkins project matlab plugin +1 moreJenkins MATLAB Plugin cross-site request forgery vulnerability8.8 High
- jenkins matlab, jenkins project matlab plugin +1 moreJenkins MATLAB Plugin missing permission checks9.8 Critical
- jenkins jira, jenkins project jira plugin +1 moreJenkins Jira Plugin vulnerable to exposure of system-scoped credentials6.5 Medium
- jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin has incorrect permission checks2.7 Low
- joomla joomla\!, joomla! project cms +1 more[20231101] - Core - Exposure of environment variables7.5 High
- qos logbackLogback "receiver" DOS vulnerability7.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...8.8 High
- trellix enterprise security manager, enterprise security manager (esm) +1 moreA server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low...4.3 Medium
- openlinksw virtuosoAn issue in the box_deserialize_reusing function in openlink virtuoso-opensource v7.2.11 allows...7.5 High
- openlinksw virtuosoAn issue in the box_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
- openlinksw virtuosoAn issue in the box_col_len function in openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
- openlinksw virtuosoAn issue in the box_add function in openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
- openlinksw virtuosoAn issue in the box_div function in openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
- openlinksw virtuosoAn issue in the cha_cmp function of openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
- openlinksw virtuosoAn issue in the box_mpy function of openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
- Show moreLoading…