CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- grand vice info webopacGrand Vice info Webopac - Arbitrary File Upload8.8 High
- grand vice info webopacGrand Vice info Webopac - SQL Injection9.8 Critical
- crm 2go 2go, crm2go, nrmendez crm 2go +2 moreWordPress CRM 2go plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- boston university (is&t) bu slideshow, bu slideshow +1 moreWordPress BU Slideshow plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- andrew milo postcasa shortcodeWordPress Postcasa Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gabriel serafini christian science bible lesson subjectsWordPress Christian Science Bible Lesson Subjects plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cool plugins web stories widgets for elementorWordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hyumika openstreetmap, mika osm +1 moreWordPress OSM – OpenStreetMap plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webangon the pack elementor addonsWordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- liquid design ltd. blocks, lqd liquid blocks +1 moreWordPress LIQUID BLOCKS plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cyberchimps responsive addons for elementorWordPress Responsive Addons for Elementor plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- l squared support squared hub wp, lsquared l squared hub, wplsquared l squared hub wp +2 moreWordPress L Squared Hub WP plugin <= 1.0 - SQL Injection vulnerability8.5 High
- andsonsdesign wp-contest, notfound wp contest +1 moreWordPress WP Contest plugin <= 1.0.0 - SQL Injection vulnerability8.5 High
- fruitcakestudios horsemanagerWordPress Horsemanager plugin <= 1.3 - SQL Injection vulnerability8.5 High
- richteam share buttons – social mediaWordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability8.5 High
- ehues gboy custom google mapWordPress Gboy Custom Google Map plugin <= 1.2 - SQL Injection vulnerability8.5 High
- joshua wolfe the novel design store directoryWordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability10.0 Critical
- ujw0l image classifyWordPress Image Classify plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- hb websol audio gallery, team hb websol hb audio gallery +1 moreWordPress HB AUDIO GALLERY plugin <= 3.0 - Arbitrary File Upload vulnerability10.0 Critical
- made i.t. formsWordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerability10.0 Critical
- dang ngoc binh audio recordWordPress Audio Record plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- ateeq rafeeq repairbuddy, webfulcreations computer repair shop +1 moreWordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability10.0 Critical
- masterbip para elementorWordPress MasterBip para Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- peter shaw lh qr codesWordPress LH QR Codes plugin <= 1.06 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- ersatzpole ml responsive audio player with playlist shortcodeWordPress ML Responsive Audio plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- simple goods goodsWordPress Simple Goods plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- abdullah extender all in one for elementorWordPress Extender All In One For Elementor plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- cloud foundry foundry, cloudfoundry cloud foundry +1 moreCVE-2024-38826 Cloud Controller Denial of Service Attack5.3 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflow8.7 High
- jinher network collaborative management platform 金和数字化智能办公平台, collaborative management platform +1 moreJinher Network Collaborative Management Platform 金和数字化智能办公平台 AcceptShow.aspx sql injection5.3 Medium
- gnome glib, debian linux, netapp active iq unified manager +31 more +33 moregio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...9.8 Critical
- gnome libsoupGNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of...7.5 High
- gnome libsoupGNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to...6.5 Medium
- gnome libsoupGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'...7.5 High
- No product listedCross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute...6.1 Medium
- trendnet tew-651br firmware, tew-652brp firmware, tew-652bru firmware +2 moreTRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store...4.8 Medium
- trendnet tew-651br firmware, tew-652brp firmware, tew-652bru firmware +2 moreTRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store...4.8 Medium
- trendnet tew-651br firmware, tew-652brp firmware, tew-652bru firmware +2 moreTRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store...4.8 Medium
- trendnet tew-651br firmware, tew-652brp firmware, tew-652bru firmware +2 moreTRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store...4.8 Medium
- dlink dir-820l firmwareD-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via...8.0 High
- powertac-serverpowertac-server XML External Entity vulnerability9.8 Critical
- phpgurukul online marriage registration systemA Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul...4.8 Medium
- netadminThe NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the...5.4 Medium
- phpgurukul user management systemA Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in...4.8 Medium
- phpgurukul online marriage registration systemA Reflected Cross Site Scriptng (XSS) vulnerability was found in /omrs/user/search.php in...6.1 Medium
- phpgurukul online marriage registration systemA SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage...9.8 Critical
- trendnet tew-820ap, tew-820ap firmware +1 moreThe boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm...9.8 Critical
- schrodinger pymolPyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of...9.8 Critical
- axigen mail serverPersistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of...6.1 Medium
- paxton-access net2Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023...7.5 High
- Show moreLoading…