CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- ami aptio v, aptiov +1 morePotential Firmware update without integrity check5.2 Medium
- ami aptiov, aptio v +1 moreRuntime Service Access outside SMRAM7.2 High
- zzcmsZZCMS msg.php cross site scripting5.1 Medium
- anisha job recruitmentcode-projects Job Recruitment admin.php sql injection5.3 Medium
- freebsdbhyve(8) NVMe driver to guest-induced infinite loops.6.5 Medium
- freebsdbhyve(8) hda driver buffer over-read6.5 Medium
- rockwellautomation factorytalk view, rockwell automation factorytalk view machine edition +1 moreFactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path7.0 High
- freebsdbhyve(8) infinite loop in the hda audio driver7.5 High
- freebsdbhyve(8) virtio_vq_recordon time-of-check to time-of-use race6.5 Medium
- nomysoft informatics nomysemSensetive Data Exposure in Nomysoft Informatics' Nomysem9.3 Critical
- freebsdbhyve(8) nvme_opc_get_log_page buffer over-read6.5 Medium
- apache cloudstackApache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure8.5 High
- digistar ag-30 plusDigistar AG-30 Plus Login Page excessive authentication2.3 Low
- get-simple getsimplecmsGetSimpleCMS profile.php cross-site request forgery6.9 Medium
- timgeyssens uiomatic, ui-o-matic +1 moreTimGeyssens UIOMatic uioMaticObject.r sql injection5.1 Medium
- 51mis lingdang crm上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal5.3 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +64 more +66 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...8.6 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +64 more +66 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...5.1 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +64 more +66 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...2.3 Low
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +47 more +49 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...5.1 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +47 more +49 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...5.3 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +47 more +49 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...8.6 High
- mendix, siemens mendix runtime v10, mendix runtime v10.12 +3 more +5 moreA vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the...6.9 Medium
- siemens simatic cp 1543-1 v4.0, simatic cp 1543-1, simatic cp 1543-1 firmware +2 moreA vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions ...8.7 High
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The...7.0 High
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The...7.3 High
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The...7.3 High
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected...8.3 High
- siemens siport, siport mp +1 moreA vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application...8.5 High
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...5.3 Medium
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...6.9 Medium
- seimens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...6.9 Medium
- seimens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...9.4 Critical
- seimens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...6.9 Medium
- seimens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...9.4 Critical
- siemens pp telecontrol server basic 1000 to 5000 v3.1, pp telecontrol server basic 256 to 1000 v3.1, pp telecontrol server basic 32 to 64 v3.1 +11 more +13 moreA vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910...10.0 Critical
- siemens ozw672, ozw772, ozw672 firmware +1 more +3 moreA vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2)...8.2 High
- siemens spectrum power 7A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). The affected...8.5 High
- siemens simatic s7-plcsim v16, simatic s7-plcsim v17, simatic step 7 safety v16 +36 more +38 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM...7.0 High
- 51mis lingdang crm上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload5.3 Medium
- 51mis lingdang crm上海灵当信息科技有限公司 Lingdang CRM index.php sql injection5.3 Medium
- xenlibxl leaks data to PVH guests via ACPI tables5.5 Medium
- xenDeadlock in x86 HVM standard VGA handling6.5 Medium
- mobisoft974 relais 2faRelais 2FA <= 1.0 - Authentication Bypass9.8 Critical
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- wpslickstream slickstream: engagement and conversionsSlickstream: Engagement and Conversions <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slick-grid Shortcode6.4 Medium
- androidbubble rss feed widget, rss feed widget project feed widget +1 moreRSS Feed Widget < 3.0.0 - Contributor+ Stored XSS5.9 Medium
- androidbubble rss feed widgetRSS Feed Widget < 3.0.1 - Reflected XSS4.8 Medium
- softbank corp. mesh wi-fi router rp562bExposure of sensitive system information to an unauthorized control sphere issue exists in Mesh...3.5 Low
- michel - xiligroup dev xili-tidy-tagsxili-tidy-tags <= 1.12.04 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…