CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- cosmote greece what's up app, cosmote what\'s up, cosmotegreece whatsup app +2 moreCosmote Greece What's Up App Realm Database RealmDB.java default key2.0 Low
rdkitOSS-FuzzStack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>No score- campcodes online shopping portalPHPGurukul Online Shopping Portal dom_data_th.php cross site scripting5.3 Medium
- appsmithAppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests...8.5 High
- idrsdev agile-boardA Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password...8.8 High
- projectworlds travel management system, travel management system project management system +1 moreCross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System...6.1 Medium
- projectworlds travel management systemSQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote...9.8 Critical
- projectworlds travel management systemSQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote...7.5 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.0 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.0 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.0 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.0 High
- openimajAn XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to...9.8 Critical
- redhat hornetqhornetq vulnerable to file overwrite, sensitive information disclosure7.1 High
- onosproject sdran-in-a-box, opennetworking onos-a1t +1 moreAn issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a...7.5 High
- usebruno brunoBruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for...6.5 Medium
- magiskThe install() function of ProviderInstaller.java in Magisk App before canary version 27007 does...8.4 High
- langflowLangflow vulnerable to remote code execution9.8 Critical
- gaizhenbiao chuanhuchatgpt, gaizhenbiao\/chuanhuchatgpt +1 moregaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site...6.1 Medium
- mudler localaiLocalAI Cross-site Scripting vulnerability6.1 Medium
- gradio project gradiogradio Server Side Request Forgery vulnerability6.5 Medium
- modelscope agentscopeAgentScope uses `eval`9.8 Critical
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This...8.0 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs...8.0 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +15 more +17 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...5.1 Medium
- akamai secure internet access enterprise threatavertAkamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization...7.1 High
- bitrix bitrix24Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100...6.8 Medium
- bitrix bitrix24Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100...4.9 Medium
- bitrix bitrix24Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100...6.8 Medium
- bitrix bitrix24Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100...4.9 Medium
- bitrix bitrix24Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100...4.9 Medium
- chamilo lmsChamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated...7.5 High
- chamilo lmsA Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker...6.1 Medium
- chamilo lmsA Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php,"...5.4 Medium
- chamilo lmsChamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin...8.8 High
- campcodes online shopping portalPHPGurukul Online Shopping Portal dom_data.php cross site scripting5.3 Medium
- campcodes online shopping portalPHPGurukul Online Shopping Portal deferred_table.php cross site scripting5.3 Medium
- campcodes online shopping portalPHPGurukul Online Shopping Portal complex_header_2.php cross site scripting5.3 Medium
- campcodes online shopping portalPHPGurukul Online Shopping Portal editable_ajax.php cross site scripting5.3 Medium
- anisha wazifa systemcode-projects Wazifa System control.php sql injection5.3 Medium
- anisha e-health care systemcode-projects E-Health Care System registration.php sql injection6.9 Medium
- anisha e-health care systemcode-projects E-Health Care System consulting_detail.php sql injection5.3 Medium
- anisha e-health care systemcode-projects E-Health Care System adminlogin.php sql injection6.9 Medium
- Show moreLoading…