CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- run.codesUsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.8.1 High
- google androidThe Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for...8.1 High
- google ds allvideo.downloader.browser application for androidThe DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6...5.4 Medium
- google androidThe com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android...8.1 High
- google androidThe com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One)...8.1 High
- google androidThe SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for...9.1 Critical
- powerjobPowerjob >= 3.20 is vulnerable to SQL injection via the version parameter.9.8 Critical
- wi-fi-test suite suiteWi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802...8.8 High
- engenius ews356 fit, engeniustech ews356-fit firmware +1 moreEnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an...9.8 Critical
- sublimetext sublime text 4Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build...9.8 Critical
- foundstone superscanSuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.9.8 Critical
- iobit driver boosterDriver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the...7.5 High
- project worlds free download online shopping systemProject Worlds Free Download Online Shopping System success.php sql injection5.3 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System About Us Page aboutedit.php sql injection5.1 Medium
- codezips hospital appointment systemCodezips Hospital Appointment System removeBranchResult.php sql injection6.9 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflow8.7 High
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System admin-profile.php sql injection6.9 Medium
- opajaap wp photo album plusWP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay7.3 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter6.1 Medium
- wpza amp img shortcodeWordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- oretnom23 simple music cloud community systemSourceCodester Simple Music Cloud Community System ajax.php unrestricted upload5.3 Medium
- camunda bpmn.ioWordPress bpmn.io plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- lpagg 3d presentationWordPress 3D Presentation plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cleversoft clever addons for elementorWordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 moreWordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kentothemes kento ads rotatorWordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- anas edreesi marquee elementor with postsWordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System online_status.php sql injection5.3 Medium
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System language.php cross site scripting5.3 Medium
- zkteco zkbio timeZKTeco ZKBio Time Image File photo direct request6.3 Medium
- d-link di-8003, di-8003 firmware +1 moreD-Link DI-8003 dbsrv.asp dbsrv_asp stack-based overflow8.7 High
- d-link di-8003, di-8003 firmware +1 moreD-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflow8.7 High
- d-link di-8003, dlink di-8003 firmware +1 moreD-Link DI-8003 upgrade_filter.asp upgrade_filter_asp os command injection5.3 Medium
- weechatWeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c...9.8 Critical
- extremenetworks extremeosThe BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not...No score
- grame faustIn Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L:...7.5 High
- lemonldap-ngAn issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in...9.1 Critical
- No product listedCertain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not...5.5 Medium
- No product listedCertain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not...3.5 Low
- No product listedCertain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not...5.5 Medium
- mattermost, mattermost server +1 morePrivate channel names leaking when Elasticsearch is enabled4.3 Medium
- mattermost, mattermost server +1 moreMFA Code Replay3.1 Low
- mattermost, mattermost server +1 moreUnauthorized Access to view channels' details2.7 Low
- nicheaddons sales page addon – elementor & beaver builder, sales page addon +1 moreWordPress Sales Page Addon plugin <= 1.4.5 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- braft elementary addonsWordPress Elementary Addons plugin <= 2.0.4 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- softfirm definitive addons for elementorWordPress Definitive Addons for Elementor plugin <= 1.5.16 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- riponhossain super addons for elementorWordPress Super Addons for Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpcirqle bigmart elementsWordPress Bigmart Elements plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hoosoft hoo addons for elementorWordPress Hoo Addons for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp grids slickoWordPress Slicko plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…