CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- bowo admin and site enhancements (ase)Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG5.4 Medium
- softbank mesh wi-fi router rp562b firmware, softbank corp. mesh wi-fi router rp562b +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection') issue...8.0 High
- softbank corp. mesh wi-fi router rp562bActive debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and...4.6 Medium
- mayurik hospital management system, sourcecodester online hospital management system +1 moreSourceCodester Hospital Management System edit-doc.php cross site scripting5.3 Medium
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System search-invoices.php sql injection5.1 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a...3.3 Low
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an...7.8 High
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System index.php sql injection6.9 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an...7.8 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison6.4 Medium
- scottpaterson business essentials for contact form 7, wpplugin contact form 7 redirect \& thank you page +1 moreContact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting6.1 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreMultiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion2.7 Low
- futuriowp futurio extraFuturio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an...7.8 High
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a...7.8 High
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block5.3 Medium
- mutt, neomutt, red hat enterprise linux 7 +3 more +5 moreMutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing5.3 Medium
- anisha job recruitment, code projects job recruitement +1 morecode-projects Job Recruitment login.php sql injection6.9 Medium
- phpgurukul student record management systemSourceCodester Student Record Management System Main Menu infinite loop4.8 Medium
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: to and cc email header fields are not protected by cryptographic signing6.5 Medium
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +7 more +9 moreA buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version...4.5 Medium
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +7 more +9 moreA post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48...6.8 Medium
- agence web eoxia - montpellier task managercode-projects Task Manager newProject.php sql injection5.3 Medium
- sap host agentLocal Privilege Escalation in SAP Host Agent6.3 Medium
- sap se netweaver application server abap, netweaver and abap platform +1 moreInformation Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3 Medium
- sap netweaver application server java, sap se netweaver application server java (logon application) +1 moreInformation Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)5.3 Medium
- sap web dispatcherCross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher8.8 High
- sap se netweaver java (software update manager)Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)4.7 Medium
- sap se cash management (cash operations)Missing authorization check in SAP Cash Management (Cash Operations)3.5 Low
- sap se netweaver application server for abap and abap platform, sap netweaver abap application server +1 moreNULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform5.3 Medium
- sap se netweaver as java (system landscape directory), sap netweaver system landscape directory +1 moreMissing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)6.5 Medium
- open5gsAn issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the...7.5 High
- snipeitapp snipe-itAn issue in Snipe-IT v.7.0.13 build 15514 allows a remote attacker to escalate privileges via the...8.0 High
- snipeitapp snipe-itCross Site Scripting vulnerability in Snipe-IT8.7 High
- realtimelogic sharksslA Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL 09...5.3 Medium
- microsoft .net, .net 9.0, visual studio 2022 version 17.10 +5 more +7 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net 9.0, visual studio 2022 version 17.10 +5 more +7 more.NET and Visual Studio Remote Code Execution Vulnerability9.8 Critical
- d-link dwr-2000m firmwareCross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink...4.3 Medium
- d-link dwr-2000m firmwareCross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G...5.4 Medium
- d-link dwr-2000m firmwareAn issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME...9.8 Critical
- No product listedCross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G...6.6 Medium
- dlink dwr-2000m firmwareAn issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME...8.0 High
- freescout helpdesk freescoutThe End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to...9.1 Critical
- appspaceAppspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset...6.5 Medium
- No product listedSercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting (XSS) via the...5.4 Medium
- sercomm s3-ac2100 firmwareSercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the...7.3 High
- No product listedSOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi...4.7 Medium
- No product listedSOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized...7.6 High
- red hat ansible automation platform execution environments, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 more +4 moreAnsible-core: unsafe tagging bypass via hostvars object in ansible-core5.5 Medium
- ping identity pingaccessAccess rules for PingAccess may be circumvented with URL-encoded characters5.8 Medium
- Show moreLoading…