CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
buildahRocky Linux,podmanRocky Linux,runcRocky Linux +17 more +19 moreImportant: container-tools:rhel8 security updateNo score- apache airflowApache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli4.9 Medium
- hasomed elefant software updaterLocal Privilege Escalation via Race Condition7.0 High
- hasomed elefantHardcoded Service Password7.8 High
- hasomed elefant software updaterLocal Privilege Escalation via Command Injection7.8 High
- hasomed elefantLocal Privilege Escalation via Weak Service Binary Permissions7.8 High
- hasomed elefantUnprotected FHIR API7.5 High
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- manageengine sharepoint manager plus, zohocorp manageengine sharepoint manager plus +1 moreXML External Entity8.5 High
- mycred, saadiqbal points management system for gamification, ranks, badges, and loyalty rewards program – mycred +1 moremyCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode6.4 Medium
- hasomed elefantUnprotected Exposed Firebird Database with default credentials9.8 Critical
- manageengine admanager plus, zohocorp manageengine admanager plus +1 morePrivilege Escalation8.8 High
- codeastro real estate management systemCodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload5.1 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload5.1 Medium
- 1000 projects bookstore management system1000 Projects Bookstore Management System process_category_add.php sql injection6.9 Medium
- 1000 projects bookstore management system1000 Projects Bookstore Management System book_list.php sql injection5.3 Medium
- benjamin zekavica easy svg supportEasy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- 1000 projects bookstore management system1000 Projects Bookstore Management System process_category_edit.php sql injection6.9 Medium
- codezips hospital appointment systemCodezips Hospital Appointment System removeDoctorResult.php sql injection6.9 Medium
- linux, linux kernel +1 moreudf: refactor inode_bmap() to handle error7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreposix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()5.5 Medium
- linux, linux kernel +1 moreRDMA/bnxt_re: Add a check for memory allocation7.8 High
- linux, linux kernel +1 moreRDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages7.8 High
- linux, linux kernel +1 morering-buffer: Fix reader locking when changing the sub buffer order7.8 High
- linux, linux kernel +1 morenet: ethernet: mtk_eth_soc: fix memory corruption during fq dma init9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()5.5 Medium
- linux, linux kernel +1 morefs: don't try and remove empty rbtree node5.5 Medium
- linux, linux kernel +1 morebpf, arm64: Fix address emission with tag-based KASAN enabled7.8 High
- codezips online institute management systemCodezips Online Institute Management System edit_user.php unrestricted upload5.3 Medium
- linux, linux kernel +1 morenilfs2: propagate directory read errors from nilfs_find_entry()5.5 Medium
- linux, linux kernel +1 moredrm/radeon: Fix encoder->possible_clones5.5 Medium
- linux, linux kernel +1 moremaple_tree: correct tree corruption on spanning store7.8 High
- linux, linux kernel +1 moremm/swapfile: skip HugeTLB pages for unuse_vma5.5 Medium
- linux, linux kernel +1 moreiio: light: veml6030: fix IIO device retrieval from embedded device5.5 Medium
- linux, linux kernel +1 morepinctrl: intel: platform: fix error path in device_for_each_child_node()5.5 Medium
- linux, linux kernel +1 morepinctrl: ocelot: fix system hang on level based interrupts5.5 Medium
- linux, linux kernel +1 moreposix-clock: Fix missing timespec64 check in pc_clock_settime()7.1 High
- linux, linux kernel +1 morearm64: probes: Fix uprobes for big-endian kernels5.5 Medium
- linux, linux kernel +1 morex86/entry_32: Clear CPU buffers after register restore in NMI return7.1 High
- linux, linux kernel +1 moreirqchip/gic-v4: Don't allow a VMOVP on a dying VPE4.7 Medium
- linux, linux kernel +1 moreext4: don't set SB_RDONLY after filesystem errors5.5 Medium
- linux, linux kernel +1 moreice: fix memleak in ice_init_tx_topology()5.5 Medium
- linux, linux kernel +1 moreHID: amd_sfh: Switch to device-managed dmam_alloc_coherent()7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: phy: dp83869: fix memory corruption when enabling fiber7.8 High
- linux, linux kernel +1 moredrm/vc4: Stop the active perfmon before being destroyed7.8 High
- linux, linux kernel +1 morenet: explicitly clear the sk pointer, when pf->create fails7.8 High
- linux, linux kernel +1 moremptcp: handle consistently DSS corruption8.2 High
- linux, linux kernel +1 morevirtio_pmem: Check device status before requesting flush5.5 Medium
- linux, linux kernel +1 morescsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance4.7 Medium
- linux, linux kernel +1 moresecretmem: disable memfd_secret() if arch cannot set direct map7.1 High
- Show moreLoading…