CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- angeljudesuarez farm management systemitsourcecode Farm Management System manage-breed.php sql injection5.3 Medium
- codezips free exam hall seating management systemCodezips Free Exam Hall Seating Management System teacher.php sql injection6.9 Medium
- codezips free exam hall seating management systemCodezips Free Exam Hall Seating Management System student.php sql injection6.9 Medium
- project worlds life insurance management systemProject Worlds Life Insurance Management System editNominee.php sql injection5.3 Medium
- project worlds life insurance management systemProject Worlds Life Insurance Management System editPayment.php sql injection5.3 Medium
- carmelogarcia restaurant order system, code-projects online restaurant management system +1 morecode-projects Restaurant Order System login.php sql injection6.9 Medium
- tongda oa 2017, tongda2000 office anywhere +1 moreTongda OA 2017 index.php sql injection5.3 Medium
- jinher oa, tongda oa 2017, tongda2000 office anywhere +2 moreTongda OA check_seal.php sql injection5.3 Medium
- jinher oa, tongda oa 2017, tongda2000 office anywhere +2 moreTongda OA web_show.php sql injection5.3 Medium
llamacppOSS-FuzzUNKNOWN READ in llama_output_reserveNo score- code-projects simple car rental systemcode-projects Simple Car Rental System signup.php sql injection6.9 Medium
- phpgurukul car rental portalPHPGurukul Car Rental Portal search.php cross site scripting5.3 Medium
- anisha university event management systemcode-projects University Event Management System submit.php sql injection5.3 Medium
- anisha wazifa systemcode-projects Wazifa System logincontrol.php sql injection6.9 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow8.7 High
- tenda ac6, ac6 firmware +1 moreTenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection5.3 Medium
- bytecodealliance wasmtimeWasmtime doesn't fully sandbox all the Windows device filenames2.3 Low
- spider-themes bbp core, spiderdevs forumax – ai powered advanced community forum plugin +1 moreBBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter6.1 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate5.4 Medium
- wedevs recaptcha integration for wordpress, recaptcha integration +1 moreReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site Scripting6.1 Medium
- reputeinfosystems appointment booking calendar plugin and scheduling plugin – bookingpress, bookingpress +1 moreAppointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection5.3 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Galler…6.4 Medium
pcre2OSS-FuzzStack-buffer-overflow in _pcre2_compile_class_not_nested_16No score- qbittorrentqBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.8.1 High
- okta verify, verify for windows +1 moreThe Okta Device Access features, provided by the Okta Verify agent for Windows, provides access...7.1 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1,...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1,...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1,...5.5 Medium
- ibm cics tx standard, cics tx +1 moreIBM CICS TX Standard cross-site request forgery6.5 Medium
- ibm cics tx standard, cics tx +1 moreIBM CICS TX Standard cross-site scripting6.1 Medium
- ibm txseries for multiplatformsIBM TXSeries for Multiplatforms information disclosure5.3 Medium
- ibm txseries for multiplatformsIBM TXSeries for Multiplatforms information disclosure5.9 Medium
- zusamZusam vulnerable to stored XSS, allowing token theft via crafted SVG8.8 High
- changedetection, dgtlmoon changedetection.io +1 morechangedetection.io Path Traversal vulnerability6.9 Medium
- oakserver oakoak's path traversal allows transfer of hidden files within the served root directory7.7 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 SetOnlineDevName formSetDeviceName stack-based overflow8.7 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 SetDlnaCfg stack-based overflow8.7 High
- esafenet cdgESAFENET CDG HookService.java deleteHook sql injection5.3 Medium
- esafenet cdgESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection5.3 Medium
- jinher oa, tongda2000 office anywhere +1 moreTongda OA check_seal.php sql injection5.3 Medium
- jinher oa, tongda2000 office anywhere +1 moreTongda OA prcs_info.php sql injection5.3 Medium
- tongda oa 2017, tongda2000 office anywhere +1 moreTongda OA 2017 apply.php sql injection5.3 Medium
- prism it systems user rights access managerWordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability6.5 Medium
- wp chill htaccess file editorWordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability6.5 Medium
- happymonster happy addons for elementorWordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability4.3 Medium
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability5.4 Medium
- cubewpWordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability4.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability7.1 High
- kraft plugins wheel of lifeWordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability5.3 Medium
- shahjahan jewel fluent supportWordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability5.3 Medium
- Show moreLoading…