CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- huawei harmonyosVulnerability of input parameters not being verified in the HDC module Impact: Successful...5.5 Medium
- huawei harmonyosVulnerability of input parameters not being verified in the HDC module Impact: Successful...5.0 Medium
- 2n access commanderIn 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an...7.2 High
- huawei harmonyosVulnerability of message types not being verified in the advanced messaging modul Impact:...5.3 Medium
- huawei harmonyosVulnerability of improper memory access in the phone service module Impact: Successful...5.1 Medium
- huawei harmonyosPermission control vulnerability in the ability module Impact: Successful exploitation of this...6.2 Medium
- huawei harmonyosRace condition vulnerability in the kernel network module Impact:Successful exploitation of this...6.2 Medium
- huawei harmonyosVulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful...5.3 Medium
- huawei harmonyosVulnerability of processes not being fully terminated in the VPN module Impact: Successful...5.5 Medium
- huawei harmonyosVulnerability of parameter type not being verified in the WantAgent module Impact: Successful...6.2 Medium
- huawei harmonyosVulnerability of parameter type not being verified in the WantAgent module Impact: Successful...6.2 Medium
- castos seriously simple podcastingSeriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameter6.1 Medium
- ithemelandco woocommerce report, reportit – advanced reporting for woocommerce +1 moreWooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Update8.8 High
- wpweb woocommerce - social login, woocommerce social login +1 moreSocial Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider8.1 High
- basticom frameworkBasticom Framework <= 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this...7.6 High
- openatom openharmonyLiteos_a has an Out-of-bounds Read vulnerability3.3 Low
- openatom openharmonyLiteos_a has an out-of-bounds Write vulnerability8.4 High
- openatom openharmonyLiteos_a has a double free vulnerability8.4 High
- openatom openharmonyLiteos_a has an out-of-bounds Write vulnerability8.4 High
- loginizer, softaculous loginizer security +1 moreLoginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider8.1 High
- podsfoundation podsPods < 3.2.7.1 - Admin+ Stored XSS4.8 Medium
- shaon post from frontendPost From Frontend <= 1.0.0 - Post Deletion via CSRF4.3 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments, nsquared appointment booking calendar +2 moreAppointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS4.8 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments, nsquared appointment booking calendar +2 moreAppointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS4.8 Medium
- dublue table of contents plusTable of Contents Plus <= 2408 - Editor+ Stored XSS4.8 Medium
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreSQL Injection8.3 High
- cmorillas1 shortcodes blocks creator ultimateShortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- anisha e-health care systemcode-projects E-Health Care System app_request.php sql injection5.3 Medium
- anisha e-health care systemcode-projects E-Health Care System chat.php sql injection5.3 Medium
- anisha e-health care systemcode-projects E-Health Care System req_detail.php sql injection5.3 Medium
- anujkumar hospital management systemPHPGurukul Hospital Management System search.php cross site scripting5.1 Medium
- anujkumar hospital management systemPHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting5.1 Medium
mrubyOSS-FuzzSegv on unknown address in udivNo scoreopenjpegOSS-FuzzHeap-buffer-overflow in opj_j2k_read_tile_headerNo scoreclamavOSS-FuzzSegv on unknown address in yara_yyparseNo scorepocoOSS-FuzzSegv on unknown address in std::__1::ios_base::~ios_baseNo scorecontextDebiancontext - bugfix updateNo score- netgear r7000p firmwareNetgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask...5.7 Medium
- netgear r7000p firmwareNetgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask...5.7 Medium
- netgear r7000p firmwareNetgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask...5.7 Medium
- netgear r6400v2 firmware, r7000p firmware, xr300 firmware +2 moreNetgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a...5.7 Medium
- netgear r6400 firmware, r6400v2 firmware, r7000p firmware +1 more +3 moreNetgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a...5.7 Medium
- netgear r6400 firmware, r6400v2 firmware, r7000p firmware +1 more +3 moreNetgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a...5.7 Medium
- netgear r6400 firmware, r6400v2 firmware, r7000p firmware +1 more +3 moreNetgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a...5.7 Medium
- netgear r6400 firmware, r6400v2 firmware, r7000p firmware +2 more +4 moreNetgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were...8.0 High
- netgear r6400 firmware, r7000p firmware, r8500 firmware +1 more +3 moreNetgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the...8.0 High
- netgear r6400 firmware, r7000p firmware, r8500 firmware +1 more +3 moreNetgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the...8.0 High
- netgear r8500 firmwareNetgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the...8.0 High
- netgear xr300 firmwareNetgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the...8.0 High
- Show moreLoading…