CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- linux, linux kernel +1 morefbdev: sisfb: Fix strbuf array overflow7.8 High
- fullworks simple shortcode for google mapsSimple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- codezips online institute management systemCodezips Online Institute Management System manage_website.php unrestricted upload5.3 Medium
- linux, linux kernel +1 moreceph: remove the incorrect Fw reference check when dirtying pages5.5 Medium
- linux, linux kernel +1 morecpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: fix a UBSAN warning in DML2.15.5 Medium
- linux, linux kernel +1 moreremoteproc: k3-r5: Fix error handling when power-up failed5.5 Medium
- linux, linux kernel +1 moremedia: qcom: camss: Remove use_count guard in stop_streaming7.8 High
- linux, linux kernel +1 moredrm/panthor: Fix race when converting group handle to group object7.8 High
- linux, linux kernel +1 moredrm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()7.8 High
- codezips hospital appointment systemCodezips Hospital Appointment System editBranchResult.php sql injection6.9 Medium
- cross-spawnRegular Expression Denial of Service (ReDoS) in cross-spawn8.7 High
- oretnom23 online veterinary appointment systemSourceCodester Online Veterinary Appointment System view_service.php sql injection5.3 Medium
- anisha e-health care systemcode-projects E-Health Care System detail.php sql injection5.3 Medium
- anisha e-health care systemcode-projects E-Health Care System doctor_login.php sql injection6.9 Medium
- anisha e-health care systemcode-projects E-Health Care System user_appointment.php sql injection5.3 Medium
- dell powerprotect dd, data domain operating system, powerprotect data domain management center +2 moreDell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an...6.5 Medium
- dell data domain operating system, powerprotect dd +1 moreDell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50,...6.8 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information...3.1 Low
krb5OSS-FuzzUse-of-uninitialized-value in k5_hashtab_addNo score- gnu guixguix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are...8.1 High
- os4ed opensis, opensis-classic +1 moreSQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the...9.8 Critical
- 07fly 07flycms07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...4.7 Medium
- alexstack laravel cmsFile Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute...7.2 High
- hooskAn issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to...6.5 Medium
- oretnom23 toll tax management system, toll tax management system project tax management system +1 moreA Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax...5.4 Medium
- cab management system project management system, oretnom23 cab management system +1 moreA Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management...5.4 Medium
- cab management system project management system, oretnom23 cab management system +1 moreA SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab...6.5 Medium
- dingfanzu cms, timgreen dingfanzu cms +1 moredingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...9.3 Critical
- tendcode izonehopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the...9.1 Critical
- tendcode izonehopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article...5.4 Medium
- sdcmsThe theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the...8.8 High
- seacmsSeaCms 13.1 is vulnerable to code injection in the notification module of the member message...8.8 High
- sbond watcharrA vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform...8.8 High
- sunniwell ht3300 firmwaresunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin...9.8 Critical
- No product listedNorthern.tech Hosted Mender before 2024.07.11 allows SSRF.2.7 Low
- northern.tech menderNorthern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.4.3 Medium
- northern.tech menderNorthern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.6.5 Medium
- mgt-commerce cloudpanelAn Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH v2...6.5 Medium
- homeserveAn incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a...6.8 Medium
- hitbytes lifeAn incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a...6.8 Medium
- lonelycoder vmirvmir e8117 was discovered to contain a segmentation violation via the export_function function at...5.5 Medium
- lonelycoder vmirvmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src...9.8 Critical
- lonelycoder vmirvmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse...5.5 Medium
- lonelycoder vmirvmir e8117 was discovered to contain a segmentation violation via the import_function function at...5.5 Medium
- lonelycoder vmirvmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions...7.8 High
- lonelycoder vmirvmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src...7.8 High
- lonelycoder vmirvmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function...5.5 Medium
- kanaka wacwac commit 385e1 was discovered to contain a heap overflow.6.2 Medium
- kanaka wacwac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac...5.5 Medium
- Show moreLoading…