CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- nuget dotnetzip, dotnetzip.semverd project dotnetzip.semverd, mihula prodotnetzip +2 moreDotNetZip Directory Traversal vulnerability9.8 Critical
- No product listedThe file upload function in the "QWKalkulation" tool of baltic-it TOPqw Webportal v1.35.287.1 ...6.1 Medium
- No product listedThe "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.291), in ...6.1 Medium
- No product listedbaltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incorrect Access Control in the User...6.5 Medium
- balticit topwqThe login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps...6.5 Medium
- No product listedThe create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in ...5.4 Medium
- No product listedA stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service...6.1 Medium
- oretnom23 computer laboratory management systemSQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0...4.3 Medium
- cybelesoft thinfinity workspaceCybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded...4.8 Medium
- cybelesoft thinfinity workspaceCybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access...7.3 High
- cybelesoft thinfinity workspaceA full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers...7.5 High
- cybelesoft thinfinity workspaceIncorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows...8.1 High
- cybelesoft thinfinity workspaceCybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access...9.8 Critical
- gnu wgetGNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs6.5 Medium
- phpgurukul cyber cafe management systemCross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker...4.8 Medium
dotnet9Ubuntudotnet9 vulnerabilitiesNo score- python software foundation cpythonImproper validation of IPv6 and IPvFuture addresses6.3 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- google chromeInappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a...4.3 Medium
- google chromeInappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69...8.8 High
- google chromeInappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed...8.3 High
- google chromeUse after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker...8.8 High
- google chromeUse after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote...8.8 High
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a...6.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Untrusted Search Path (CWE-426)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Write-what-where Condition (CWE-123)5.5 Medium
- Show moreLoading…