CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- linux, linux kernel +1 morethermal: intel: int340x: processor: Fix warning during module unload5.5 Medium
- linux, linux kernel +1 morenet: netconsole: fix wrong warning3.3 Low
- linux, linux kernel +1 moredm vdo: don't refer to dedupe_context after releasing it7.8 High
- linux, linux kernel +1 moredrm/xe/oa: Fix overflow in oa batch buffer7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- hp, inc. certain poly video conference devices, hp poly studio g62 firmware, poly studio g7500 firmware +14 more +16 moreCertain Poly Video Conference Devices – Potential Remote Code Execution7.5 High
- enel x juicebox pro 3.0 22kw cellular, enelx waybox pro firmware +1 moreInsecure loose comparison in Enel X JuiceBox4.2 Medium
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreHeap overflow in CM_main.exe binary in Enel X JuiceBox9.0 Critical
- sigstore gitsignUse of incorrect Rekor entries during verification in gitsign1.8 Low
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular +1 moreIncorrect file ownership of privileged service's libraries in Enel X JuiceBox6.7 Medium
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreExposed TCF agent service in Enel X Juicebox9.6 Critical
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreUnauthorized Remote Command Execution in Enel X Juicebox9.6 Critical
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreUnauthorized SQLite Injection9.6 Critical
- j3ssie osmedeusStored Cross-site Scripting to RCE on Osmedeus Web Server8.7 High
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreUnauthorized SQLite Injection in Enel X Juicebox9.6 Critical
- enel x juicebox pro 3.0 22kw cellular, juicebox pro3.0 22kw cellular, enelx waybox pro firmware +2 moreAuthentication Bypass in JuiceBox Web Manager interface8.8 High
- octoprintAPI key access in settings without reauthentication in OctoPrint5.3 Medium
- enel x juicebox pro 3.0 22kw cellular, enelx waybox pro firmware +1 morePHP Information Disclosure in Enel X JuiceBox4.3 Medium
- octoprintJinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint5.5 Medium
- enel x juicebox pro 3.0 22kw cellular, enelx waybox pro firmware +1 moreDenial of Service via Web Management interface in Enel X JuiceBox6.5 Medium
- enel x juicebox pro 3.0 22kw cellularUnauthorized System Log Disclosure in Enel X JuiceBox5.7 Medium
- 1000 projects bookstore management system, bookstore management system project management system +1 more1000 Projects Bookstore Management System book_detail.php sql injection6.9 Medium
- 1000 projects bookstore management system, bookstore management system project management system +1 more1000 Projects Bookstore Management System search.php sql injection6.9 Medium
- romadebrian web-sekolahromadebrian WEB-Sekolah Backend Proses_Edit_Akun.php cross site scripting5.1 Medium
- romadebrian web-sekolahromadebrian WEB-Sekolah Mail Proses_Kirim.php sql injection5.3 Medium
- g5plus ultimate bootstrap elements for elementorUltimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure4.3 Medium
- genetec security centerA high-severity vulnerability that can lead to arbitrary code execution on the system hosting the...8.9 High
- romadebrian web-sekolahromadebrian WEB-Sekolah Backend akun_edit.php cross site scripting5.1 Medium
- tickera, tickera – sell tickets & manage events +1 moreTickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- bytecodealliance cap-stdcap-std doesn't fully sandbox all the Windows device filenames2.3 Low
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget5.4 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.5 Medium
- huawei emui, harmonyos +1 moreLaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this...6.6 Medium
- huawei emui, harmonyos +1 moreData verification vulnerability in the battery module Impact: Successful exploitation of this...5.5 Medium
- xplodedthemes xt floating cart for woocommerceXT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template4.3 Medium
- linux, linux kernel +1 morebpf: support non-r10 register spill/fill to/from stack in precision tracking7.8 High
- huawei emui, harmonyos +1 moreVulnerability of improper log printing in the Super Home Screen module Impact: Successful...4.0 Medium
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 morePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection9.8 Critical
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- katieseaborn zotpressZotpress <= 7.3.12 - Missing Authorization4.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the Gallery app Impact: Successful exploitation of this...5.1 Medium
- huawei harmonyosPermission control vulnerability in the hidebug module Impact: Successful exploitation of this...8.2 High
- huawei harmonyosPermission control vulnerability in the clipboard module Impact: Successful exploitation of this...6.2 Medium
- 2n access commanderIn 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges...4.7 Medium
- huawei harmonyosPermission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this...4.0 Medium
- huawei harmonyosInformation management vulnerability in the Gallery module Impact: Successful exploitation of...7.1 High
- huawei harmonyosVulnerability of improper device information processing in the device management module Impact:...6.2 Medium
- 2n access commanderIn 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data...6.3 Medium
- huawei harmonyosInput parameter verification vulnerability in the background service module Impact: Successful...5.7 Medium
- Show moreLoading…