CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- rockwell automation factorytalk updaterFactoryTalk® Updater Remote Code Execution7.1 High
- adobe photoshop, photoshop desktop, photoshop 2023 +1 more +3 morePhotoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- rockwell automation factorytalk updaterFactoryTalk® Updater Authentication Bypass9.1 Critical
- opentext alm octane, opentext™ alm octane management +1 moreImproper Neutralization vulnerability has been discovered in OpenText™ ALM Octane Management.8.6 High
- icinga, debian linux, icinga icinga2 +1 more +3 moreIcinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections9.8 Critical
- adobe commerce, magento +1 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)7.7 High
- matrix-org matrix-js-sdkmatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal5.3 Medium
- element-hq element-webElement allows a malicious homeserver can modify events leading to unrenderable events or rooms5.0 Medium
- element-hq element-webElement's thumbnails can be abused to misrepresent the content of an attachment3.5 Low
- progress software corporation ws ftp serverMulti-Factor Authentication Bypass in Progress WS_FTP Server6.5 Medium
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability5.3 Medium
- adobe animateAnimate | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe animateAnimate | Out-of-bounds Write (CWE-787)7.8 High
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- ivanti secure access clientIncorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated...7.8 High
- ivanti secure access clientA buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated...5.0 Medium
- ivanti secure access clientIncorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local...7.3 High
- ivanti secure access clientImproper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local...7.1 High
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before...6.1 Medium
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...9.1 Critical
- tobychui zoraxyZoraxy has an authenticated command injection in the Web SSH feature8.6 High
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...9.1 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...9.1 Critical
- ivanti connect secure, policy secure +1 moreA null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy...7.5 High
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy...4.9 Medium
- ivanti connect secureA stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a...7.5 High
- ivanti connect secure, policy secure +1 moreExcessive binary privileges in Ivanti Connect Secure which affects versions 22.4R2 through 22.7R2...7.8 High
- ivanti connect secure, policy secure +1 moreA use-after-free in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...8.8 High
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy...4.9 Medium
- tolgee, tolgee tolgee-platform +1 moreTolgee's configuration all configuration properties leaked in public configuration DTO9.8 Critical
- devolutions server, dvls (devolutions server) +1 moreImproper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier...4.3 Medium
- decidim-ice decidim-module-decidim awesomeDecidim-Awesome: SQL injection in AdminAccountability9.0 Critical
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...9.8 Critical
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...8.8 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...7.2 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...7.8 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...7.8 High
- ivanti avalancheAn out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote...7.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...7.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...7.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...7.5 High
- ivanti avalancheA null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated...7.5 High
- ivanti avalancheA null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated...7.5 High
- freebsdUnbounded allocation in ctl(4) CAM Target Layer7.5 High
- freebsdUnbounded allocation in ctl(4) CAM Target Layer5.3 Medium
- ami aptiov, aptio v +1 moreSMM arbitrary code execution in Overclock6.8 Medium
- ami aptiov, aptio v +1 moreBuffer Overflow Vulnerability In OFBD4.4 Medium
- Show moreLoading…