CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- vaemendis ubooquity version 2.1.2VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)4.5 Medium
- apache traffic serverApache Traffic Server: Server process can fail to drop privilege9.1 Critical
- apache traffic serverApache Traffic Server: Valid Host field value can cause crashes7.5 High
- apache traffic serverApache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack7.5 High
- vaemendis ubooquity version 2.1.2, ubooquity +1 moreVaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.5 High
- avigilon videoiq icvr hd camera, videolq icvr hd camera +1 moreAvigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet8.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator4.6 Medium
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Server-Side Request Forgery in WildFire2.1 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)6.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User5.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability5.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet8.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic8.7 High
- itg computer technology vsrm supplier relationship management systemReflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System5.1 Medium
- tecno com.transsion.phoenixUnauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to...7.5 High
- unknown recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, funnelkit automations +1 moreAutomation By Autonami < 3.3.0 - Unauthenticated SQLi8.6 High
- mitchell bennis simple file listSimple File List < 6.1.13 - Reflected Cross-Site Scripting5.4 Medium
- sonatype nexus repositoryNexus Repository 2 - Remote Code Execution7.1 High
- sonatype nexus repositoryNexus Repository 2 - Stored XSS5.1 Medium
- justdan96 tsmuxerA heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to...5.5 Medium
- 07fly 07flycms07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...4.7 Medium
- adonesevangelista agri-trading online shopping system, trading online shopping system +1 moreA business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading...7.5 High
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 moreA Directory listing issue was found in PHPGurukul User Registration & Login and User Management...5.3 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/school_year.php of...5.4 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/calendar_of_events.php...5.4 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/class.php in KASHIPARA...5.4 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/add_subject.php page in...5.4 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/department.php in...5.4 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/admin_user.php in...5.4 Medium
- lopalopa e-learning management systemA Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E...4.8 Medium
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System...9.8 Critical
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management...7.2 High
- lopalopa e-learning management system, kashipara e learning management system project +1 moreA SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management...9.8 Critical
- justdan96 tsmuxerA heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to...8.8 High
- justdan96 tsmuxerA heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to...8.8 High
- justdan96 tsmuxerA negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause...6.5 Medium
- phpgurukul user registration \& login and user management systemA Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of...4.8 Medium
- justdan96 tsmuxerA heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to...6.5 Medium
- justdan96 tsmuxerA heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to...8.8 High
- Show moreLoading…