CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- phppoet sysbasics customize my account for woocommerceSysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter6.1 Medium
- genethick wp-basicsWordPress WP-Basics plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hanusek impressWordPress imPress plugin <= 0.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- james bruner wp mmenu liteWordPress WP MMenu Lite plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- upeksha wisidagama uw freelancerWordPress UW Freelancer plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webcodin wp visual advertsWordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- narnoo commerce managerWordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- marian dietz teleadminWordPress TeleAdmin plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- minerva infotech responsive data tableWordPress Responsive Data Table plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hitesh khunt saragnaWordPress Saragna plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- michael visser jigoshop – store toolkitWordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tre technology and research s.r.l hq60 fidelity cardWordPress HQ60 Fidelity Card plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- syed umair hussain shah user password resetWordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gopi.r twitter real time search scrollingWordPress Twitter real time search scrolling plugin <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- perception system ajax content filterWordPress Ajax Content Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- adam dehnel simple modalWordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kevin walker, roman peterhans simplistic seoWordPress Simplistic SEO plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- detlef beyer svt simpleWordPress SVT Simple plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ristretto apps dashing membershipsWordPress Dashing Memberships plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- zack gilbert and paul jarvis wphelpfulWordPress WPHelpful plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpthemespace magical addons for elementor, nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ) +1 moreMagical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template4.3 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, paid member subscriptions +2 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- realmag777 fox – currency switcher professional for woocommerce, fox-currency switcher professional +1 moreThe FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morebpf: Fix out-of-bounds write in trie_get_next_key()7.8 High
- linux, linux kernel +1 moremacsec: Fix use-after-free while sending the offloading packet7.8 High
- linux, linux kernel +1 moresock_map: fix a NULL pointer dereference in sock_map_link_update_prog()4.7 Medium
- linux, linux kernel +1 morenetdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()5.5 Medium
- linux, linux kernel +1 morenet: fix crash when config small gso_max_size/gso_ipv4_max_size5.5 Medium
- linux, linux kernel +1 morenetfilter: Fix use-after-free in get_info()7.0 High
- linux, linux kernel +1 morenetfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()7.5 High
- linux, linux kernel +1 moreBluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs5.5 Medium
- linux, linux kernel +1 morebpf: Free dynamically allocated bits in bpf_iter_bits_destroy()5.5 Medium
- linux, linux kernel +1 morebpf: Check the validity of nr_words in bpf_iter_bits_new()7.8 High
- linux, linux kernel +1 moremlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenetfilter: nft_payload: sanitize offset and length before calling skb_checksum()6.2 Medium
- linux, linux kernel +1 morefsdax: dax_unshare_iter needs to copy entire blocks7.8 High
- linux, linux kernel +1 moreACPI: CPPC: Make rmw_lock a raw_spin_lock5.5 Medium
- linux, linux kernel +1 morentfs3: Add bounds checking to mi_enum_attr()7.1 High
- linux, linux kernel +1 morefs/ntfs3: Check if more than chunk-size bytes are written7.3 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morefs/ntfs3: Add rough attr alloc_size check7.8 High
- linux, linux kernel +1 morefs/ntfs3: Fix possible deadlock in mi_read5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Additional check in ni_clear()5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Fix general protection fault in run_is_mapped_full5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Additional check in ntfs_file_release7.8 High
- linux, linux kernel +1 moreNFSD: Initialize struct nfsd4_copy earlier7.5 High
- linux, linux kernel +1 morephy: qcom: qmp-usb: fix NULL-deref on runtime suspend5.5 Medium
- linux, linux kernel +1 morephy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend5.5 Medium
- linux, linux kernel +1 morephy: qcom: qmp-usbc: fix NULL-deref on runtime suspend5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: do not pass a stopped vif to the driver in .get_txpower7.8 High
- linux, linux kernel +1 morewifi: ath10k: Fix memory leak in management tx5.5 Medium
- Show moreLoading…