CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- aftab husain vertical carousel WordPress Vertical Carousel plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- notfound wp find your nearest WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- terry l. wp mathjax WordPress WP MathJax plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- capitalize my title my title WordPress Capitalize My Title WordPress plugin <= 0.5.3 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- rejuan ahamed best addons for elementor WordPress Best Addons for Elementor plugin <=1.0.5 - Stored Cross Site Scripting (XSS) vulnerability 6.5 Medium
- softhopper softtemplates for elementor WordPress Softtemplates For Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- devnex addons for elementor WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- notfound pixobe cartography, pixobe cartography +1 more WordPress Pixobe Cartography plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- sergio micó simpleschema WordPress SimpleSchema plugin <= 1.7.6.9 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- pickplugins mail picker WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- praca.pl sp. z o.o. znajdź pracę z praca.pl WordPress Znajdź Pracę z Praca.pl plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- jakub glos sparkle elementor kit WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- essential marketer breadcrumbs WordPress Essential Breadcrumbs plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability 7.1 High
- codeless cowidgets – elementor addons, cowidgets elementor addons +1 more WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- m a vinoth kumar random banner, random banner banner +1 more WordPress Random Banner plugin <= 4.2.12 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- portfoliohub wordpress portfolio builder – portfolio gallery WordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- anzar ahmed ni woocommerce cost of goods WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability 7.6 High
- ide interactive content audit exporter WordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerability 5.3 Medium
- cool plugins cryptocurrency widgets for elementor WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability 8.1 High
- gabe livan asset cleanup: page speed booster WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability 4.4 Medium
- tenda fh1201, fh1202, fh1206 +5 more +7 more Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference 5.3 Medium
- anisha wazifa system code-projects Wazifa System Setting updatesettings.php cross site scripting 5.3 Medium
- code-projects blood bank system code-projects Blood Bank System Setting updatesettings.php cross site scripting 5.3 Medium
- code-projects farmacia code-projects Farmacia visualizer-forneccedor.chp sql injection 5.3 Medium
- anisha farmacia code-projects Farmacia vendas.php cross site scripting 5.3 Medium
- anisha farmacia code-projects Farmacia editar-fornecedor.php cross site scripting 5.3 Medium
- heateor sassy social share, social sharing plugin – sassy social share +1 more Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter 6.1 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF 8.1 High
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages 8.1 High
- anisha farmacia code-projects Farmacia pagamento.php cross site scripting 5.3 Medium
- riot-os riot Spoofed length byte traps CC2538 in endless loop 6.9 Medium
- backstage Server-side request forgery in Backstage Scaffolder plugin 5.4 Medium
- ibm zhmc, zhmcclient zhmc-ansible-modules +1 more Ansible collection "ibm.ibm_zhmc" has passwords in clear text in log file and in output of some modules when specified as input 8.3 High
- zhmcclient python-zhmcclient Python package "zhmcclient" has passwords in clear text in its HMC and API logs 8.3 High
- ibexa admin-ui Cross-site Scripting in a field that is used in the Content name pattern in ibexa/admin-ui 5.3 Medium
- jpadilla pyjwt Issuer field partial matches allowed in pyjwt 2.2 Low
- python-jsonschema check-jsonschema check-jsonschema default caching for remote schemas allows for cache confusion 7.1 High
- intlify vue-i18n Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4 6.9 Medium
- intlify vue-i18n Cross-site Scripting vulnerability with prototype pollution in vue-i18n 5.3 Medium
- drakkan sftpgo Brute force takeover of OpenID Connect session cookies in sftpgo 5.3 Medium
- verapdf verapdf-library Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI 2.3 Low
- traefik X-Forwarded-Prefix Header still allows for Open Redirect in traefik 6.3 Medium
- sandboxie Path traversal in Sandboxie 9.2 Critical
- ibm security verify access IBM Security Verify Access Appliance privilege escalation 7.8 High
- ibm security verify access IBM Security Verify Access Appliance hard coded credentials 9.4 Critical
- ibm security verify access IBM Security Verify Access Appliance hard coded credentials 9.4 Critical
- ibm security verify access IBM Security Verify Access Appliance command execution 9.8 Critical
- opensolution quick.cms Path traversal vulnerability in Quick.CMS 9.1 Critical
- netwin surgemail Cross-Site Scripting (XSS) en SurgeMail de NetWin 4.6 Medium
- checkmk Logging of sitesecret to automations log 5.7 Medium
- Show olderLoading…