CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- rapid7 velociraptorRapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Service8.6 High
- hibernate hibernate-validator, red hat a-mq clients 2, cryostat 2 +29 more +31 moreHibernate-validator: rendering of invalid html with safehtml leads to html injection and xss6.1 Medium
- apache zookeeperApache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server9.1 Critical
- linux, linux kernel +1 moreRDMA/bnxt_re: Fix a possible memory leak5.5 Medium
- linux, linux kernel +1 morenet: systemport: fix potential memory leak in bcm_sysport_xmit()5.5 Medium
- linux, linux kernel +1 morenet: bcmasp: fix potential memory leak in bcmasp_xmit()7.5 High
- linux, linux kernel +1 morevsock: Update rx_bytes on read_skb()5.5 Medium
- linux, linux kernel +1 morenet/sun3_82586: fix potential memory leak in sun3_82586_send_packet()5.5 Medium
- linux, linux kernel +1 morebe2net: fix potential memory leak in be_xmit()5.5 Medium
- linux, linux kernel +1 morefsl/fman: Fix refcount handling of fman-related devices5.5 Medium
- linux, linux kernel +1 morebpf: Preserve param->string when parsing mount options7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Fix overloading of MEM_UNINIT's meaning7.8 High
- linux, linux kernel +1 morebpf: Make sure internal and UAPI bpf_redirect flags don't overlap5.5 Medium
- linux, linux kernel +1 morebpf: devmap: provide rxq after redirect9.8 Critical
- linux, linux kernel +1 morebpf: Check the remaining info_cnt before repeating btf fields7.8 High
- linux, linux kernel +1 moreALSA: hda/cs8409: Fix possible NULL dereference5.5 Medium
- linux, linux kernel +1 morefirmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()7.0 High
- linux, linux kernel +1 moreRDMA/bnxt_re: Fix out of bound check7.8 High
- linux, linux kernel +1 moreRDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop5.5 Medium
- linux, linux kernel +1 moredrm/msm: Avoid NULL dereference in msm_disp_state_print_regs()5.5 Medium
- linux, linux kernel +1 morenetdevsim: use cond_resched() in nsim_dev_trap_report_work()7.8 High
- linux, linux kernel +1 moretcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: target: core: Fix null-ptr-deref in target_alloc_device()5.5 Medium
- linux, linux kernel +1 moresmb: client: fix possible double free in smb2_set_ea()9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOBs when building SMB2_IOCTL request7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: typec: altmode should keep reference to parent7.8 High
- linux, linux kernel +1 moredrm/xe: Don't free job in TDR7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: bnep: fix wild-memory-access in proto_unregister5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix command bitmask initialization5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Don't call cleanup on profile rollback failure5.5 Medium
- linux, linux kernel +1 moreocteon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()7.5 High
- linux, linux kernel +1 moredrm/xe: fix unbalanced rpm put() with fence_fini()5.5 Medium
- linux, linux kernel +1 moreudf: fix uninit-value use in udf_get_fileshortad7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morexfrm: validate new SA's prefixlen using SA family when sel.family is unset5.5 Medium
- linux, linux kernel +1 moreACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context7.8 High
- linux, linux kernel +1 moresched/core: Disable page allocation in task_tick_mm_cid()5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Fix shift-out-of-bounds bug7.9 High
- manageengine endpoint central, zohocorp manageengine endpoint central +1 moreAgent Arbitrary File Deletion7.0 High
- hcl software bigfix complianceHCL BigFix Compliance is affected by a missing secure flag on a cookie3.8 Low
- hcl software bigfix complianceHCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information4.7 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by unvalidated redirects and forwards5.4 Medium
- unknown wp booking calendarWP Booking Calendar < 10.6.3 - Admin+ Stored XSS4.8 Medium
- guangzhou tuchuang computer software development interlib library cluster automation management system, guangzhou tuchuang interlib +1 moreGuangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System BatchOrder sql injection5.1 Medium
- guangzhou tuchuang computer software development interlib library cluster automation management system, guangzhou tuchuang interlib +1 moreGuangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System SysLib sql injection5.1 Medium
- martinvonz jjPath traversal via crafted Git repositories in jj9.3 Critical
- froala wysiwyg editonFroala WYSIWYG editor allows cross-site scripting (XSS)6.1 Medium
- expressif esp idf, espressif esp-idf +1 moreAn issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a...7.5 High
- oretnom23 survey application systemSourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via...9.8 Critical
- synacor zimbra collaboration suiteA reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration...6.1 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector...6.4 Medium
- Show moreLoading…