CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- ampacheInsufficient Validation in Controllers (Activation/Deactivation) in Ampache5.3 Medium
- ampacheInsufficient Validation in Plugins (Activation/Deactivation) in Ampache5.3 Medium
- ampacheStored Cross-Site Scripting in Ampache5.5 Medium
- ampacheInsufficient Validation in Catalog (Activation/Deactivation) in Ampache5.3 Medium
- ampacheInsufficient Validation in Delete Message in Ampache5.3 Medium
- ampacheInsufficient Message Token Validation in Ampache5.3 Medium
- ampacheStored Cross-Site Scripting in Ampache5.5 Medium
- anisha job recruitmentcode-projects Job Recruitment register.php cross site scripting5.3 Medium
- kanboardArbitrary File Read and Delete in kanboard9.1 Critical
- kanboardRemote code execution through language setting in kanboard9.1 Critical
- orchidsoftware platformMethod Exposure Vulnerability in Modals in orchid/platform4.1 Medium
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreSelf Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF2.0 Low
- gliffy onlineInsecure Configuration in Gliffy Online6.9 Medium
- anisha job recruitmentcode-projects Job Recruitment index.php sql injection6.9 Medium
- anisha job recruitmentcode-projects Job Recruitment activation.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System incadd.php sql injection5.3 Medium
- ibm websphere application serverIBM WebSphere Application Server cross-site scripting4.8 Medium
- mayurik hospital management systemSourceCodester Hospital Management System delete-account.php improper authorization5.3 Medium
- eclipse openj9, eclipse foundation open j9 +1 moreEclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength3.7 Low
imagemagickTuxCare,imagemagick-6.q16TuxCare,imagemagick-commonTuxCare +18 more +20 moreFix CVE(s): CVE-2002-27759, CVE-2020-27754, CVE-2020-27759No score- ibm maximo asset managementIBM Maximo Asset Management cross-site scripting6.4 Medium
- moodleMoodle: reflected xss via h5p error message5.4 Medium
- delta electronics diascreenDelta Electronics DIAScreen Stack-based Buffer Overflow8.4 High
- delta electronics diascreenDelta Electronics DIAScreen Stack-based Buffer Overflow8.4 High
- delta electronics diascreenDelta Electronics DIAScreen Stack-based Buffer Overflow8.4 High
- publiccmsSanluan PublicCMS Tag Type save cross site scripting5.3 Medium
- helix core, perforce helix core +1 moreUnauthenticated Denial of Service via Auto Generation Function8.7 High
- helix core, perforce helix core +1 moreUnauthenticated Denial of Service via Refuse Function8.7 High
- linux, linux kernel +1 morefork: only invoke khugepaged, ksm hooks if no error7.8 High
- helix core, perforce helix core +1 moreUnauthenticated Denial of Service via Shutdown Function8.7 High
- acronis backup plugin for cpanel & whmSensitive information disclosure during file browsing due to improper soft link handling. The...3.3 Low
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +2 moreArbitrary file overwrite during recovery due to improper soft link handling. The following...5.5 Medium
- moodleMoodle: xss risk when restoring malicious course backup file5.4 Medium
- moodleMoodle: can create global glossary without being admin5.3 Medium
- moodleMoodle: matrix user/power level management not always working as expected with suspended users5.3 Medium
- moodleMoodle: authorization headers preserved between "emulated redirects"5.3 Medium
- moodleMoodle: lack of access control when using external methods for quiz overrides5.3 Medium
- moodleMoodle: user information visibility control issues in gradebook reports5.3 Medium
- moodleMoodle: admin presets export tool includes some secrets that should not be exported3.7 Low
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - Incorrect Use of Privileged APIs9.8 Critical
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - Arbitrary File Reading through Path Traversal7.5 High
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - OS Command Injection7.2 High
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - OS Command Injection7.2 High
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - OS Command Injection7.2 High
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - OS Command Injection7.2 High
- d-link dsl6740c, dlink dsl6740c firmware +1 moreD-Link DSL6740C - OS Command Injection7.2 High
- grand vice info webopacGrand Vice info Webopac - Stored XSS5.4 Medium
- grand vice info webopac7, vice webopac +1 moreGrand Vice info Webopac7 - SQL Injection9.8 Critical
- grand vice info webopac7, vice webopac +1 moreGrand Vice info Webopac7 - Reflected XSS6.1 Medium
- grand vice info webopacGrand Vice info Webopac - Arbitrary File Upload9.8 Critical
- Show moreLoading…