CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- linux, linux kernel +1 morewifi: cfg80211: clear wdev->cqm_config pointer on free7.8 High
- linux, linux kernel +1 morewifi: iwlegacy: Clear stale interrupts before resuming device7.0 High
- linux, linux kernel +1 morestaging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()5.5 Medium
- linux, linux kernel +1 moreiio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()5.5 Medium
- linux, linux kernel +1 moreiio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()5.5 Medium
- linux, linux kernel +1 morenilfs2: fix kernel bug due to missing clearing of checked flag7.8 High
- linux, linux kernel +1 morenilfs2: fix potential deadlock with newly created symlinks5.5 Medium
- linux, linux kernel +1 morethunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan()7.1 High
- linux, linux kernel +1 morecxl/port: Fix use-after-free, permit out-of-order decoder shutdown7.8 High
- linux, linux kernel +1 morebtrfs: fix error propagation of split bios7.8 High
- linux, linux kernel +1 morespi: spi-fsl-dspi: Fix crash when not using GPIO chip select5.5 Medium
- linux, linux kernel +1 moresched/numa: Fix the potential null pointer dereference in task_numa_work()5.5 Medium
- linux, linux kernel +1 moreiov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP7.0 High
- linux, linux kernel +1 moredrm/amd/pm: Vangogh: Fix kernel memory out of bounds write7.8 High
- linux, linux kernel +1 morefork: do not invoke uffd on fork if error occurs4.7 Medium
- linux, linux kernel +1 moreocfs2: pass u64 to ocfs2_truncate_inline maybe overflow5.5 Medium
- linux, linux kernel +1 morebtrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()7.8 High
- linux, linux kernel +1 morexfs: fix finding a last resort AG in xfs_filestream_pick_ag5.5 Medium
- linux, linux kernel +1 morenvmet-auth: assign dh_key to NULL after kfree_sensitive8.1 High
- linux, linux kernel +1 moredrm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()5.5 Medium
- linux, linux kernel +1 moredrm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()5.5 Medium
- linux, linux kernel +1 morelib: alloc_tag_module_unload must wait for pending kfree_rcu calls5.5 Medium
- chris gipple propertyshiftWordPress PropertyShift plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- biplob adhikari team showcase and slider – team members builderWordPress Team Showcase and Slider plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wojciech borowicz conversion helperWordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sam hotchkiss daily imageWordPress Daily Image plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- starfish reviews satisfaction reports from help scoutWordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jason coleman don't break the codeWordPress Don't Break The Code plugin <= .3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- eewee admin custom, michael dumontet eewee admin custom +1 moreWordPress eewee admin custom plugin <= 1.8.2.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- loop now technologies, inc. firework shoppable live videoWordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- quý lê 91 administrator zWordPress Administrator Z plugin < 2024.10.21 - SQL Injection vulnerability8.5 High
- lodgix lodgix.com vacation rental website builderWordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability8.5 High
- micahblu rsvp meWordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability8.5 High
- notfound easy galleryWordPress Easy Gallery plugin <= 1.4 - SQL Injection vulnerability8.5 High
- saleswonder team: tobias 5 stars rating funnelWordPress 5 Stars Rating Funnel plugin <=1.4.01 - SQL Injection vulnerability8.5 High
- maksym marko website price calculatorWordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability8.5 High
- oleksandr ustymenko simple job managerWordPress Simple Job Manager plugin <= 1.1 - SQL Injection vulnerability8.5 High
- buddy lindsey golf trackerWordPress Golf Tracker plugin <= 0.7 - SQL Injection vulnerability8.5 High
- market360 market 360 viewerWordPress Market 360 Viewer plugin <= 1.01 - SQL Injection vulnerability8.5 High
- porslineWordPress Porsline plugin <= 1.0.2 - SQL Injection vulnerability8.5 High
- reza sh download-mirror-counterWordPress Download-Mirror-Counter plugin <= 1.1 - SQL Injection vulnerability8.5 High
- edc team (e-da`wah committee) quran shortcodeWordPress Quran Shortcode plugin <= 1.5 - SQL Injection vulnerability8.5 High
- sanjay prasad loginplusWordPress Loginplus plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- zaus forms: 3rd-party post againWordPress Forms: 3rd-Party Post Again plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vietfriend team friendstore for woocommerceWordPress FriendStore for WooCommerce plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bestweblayout realty by bestwebsoftWordPress Realty by BestWebSoft plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- quomodosoft elementsready, elementsready addons for elementor +1 moreWordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nik00726 responsive filterable portfolioWordPress Responsive Filterable Portfolio plugin <= 1.0.22 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery9.8 Critical
- nouthemes leopard - wordpress offload media, nouthemese leopard +1 moreLeopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update9.8 Critical
- Show moreLoading…