CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- aitool ai auto tool content writing assistant (gemini writer, chatgpt ) all in one, kct ai auto tool content writing assistant +1 moreWordPress Ai Auto Tool Content Writing Assistant plugin <= 2.1.2 - Broken Access Control vulnerability7.5 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreXSS and Open Redirect via SVG File Upload in parisneo/lollms-webui7.3 High
- zenml, zenml-io zenml-io/zenml +1 moreLack of login attempt rate-limiting in zenml-io/zenml5.4 Medium
- sage ai ai: chatbots, openai gpt-4 bulk articles, dalle-3 image generation, sageai sage ai, wpmonks sage ai: chatbots, openai gpt-4 bulk articles, dalle-3 image generation +2 moreWordPress Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation plugin <= 2.4.9 - Arbitrary File Upload vulnerability9.9 Critical
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreExposure of Sensitive Information in lunary-ai/lunary9.1 Critical
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreExposure of Sensitive Information in lunary-ai/lunary9.1 Critical
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreIncorrect Authorization in lunary-ai/lunary9.6 Critical
- shoaib rehmat zij kartWordPress ZIJ KART plugin <= 1.1 - Local File Inclusion vulnerability8.1 High
- imartinez imartinez/privategpt, privategpt +1 morePython Command Injection in imartinez/privategpt9.8 Critical
- psf psf/requests, psf-requests +1 moreUnclaimed S3 Bucket Reference in psf/requests Documentation4.3 Medium
- realmag777 wolf, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability4.9 Medium
- donnellc global gateway e4 | payeezy gateway |, payeezy global gateway e4 +1 moreWordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability8.6 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability9.1 Critical
- giskard-ai giskardReDoS in Giskard Scan text perturbation6.9 Medium
- elastic kibanaKibana arbitrary code execution via YAML deserialization9.1 Critical
- rcokwellautomation arena input analyzerInput Validation Vulnerability exists in Arena® Input Analyzer7.0 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreImproper neutralization of null bytes may lead to buffer over-reads in MongoDB Server6.8 Medium
- mayurik best employee management systemSourceCodester Best Employee Management System profile.php unrestricted upload5.1 Medium
- mayurik best employee management systemSourceCodester Best Employee Management System edit_role.php sql injection5.1 Medium
s2n-tlscrates.ios2n-tls has undefined behavior at process exitNo score- hcl software connectionsHCL Connections is vulnerable to a broken access control vulnerability3.7 Low
- matrix-org matrix-appservice-ircmatrix-appservice-irc allows IRC Command injection in provisioning API5.4 Medium
- osamataher java-springboot-codebasecommon-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)8.7 High
- tcl cameraArbitrary file removal via path traversal in TCL Camera8.2 High
- poznan supercomputing and networking center dingo dlibraReflected XSS in DInGO dLibra5.3 Medium
- mayurik best employee management systemSourceCodester Best Employee Management System fetch_product_details.php sql injection5.3 Medium
- eyoucmsEyouCMS Website Logo unrestricted upload5.1 Medium
- eyoucmsEyouCMS FilemanagerLogic.php editFile path traversal5.3 Medium
- wpvivid migration\, backup\, staging, wpvividplugins migration backup staging wpvivd backup and migration, wpvivid — backup, migration & staging +2 moreMigration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection8.8 High
- easyphp web server, webserver +1 morePath traversal vulnerability in EasyPHP6.5 Medium
- apereo cas, cas server, central authentication service +2 moreApereo CAS 2FA login improper authentication5.3 Medium
- apereo cas, cas server, central authentication service +2 moreApereo CAS login session expiration6.3 Medium
- gitlabIncorrect Ownership Assignment in GitLab3.1 Low
- gitlabImproper Restriction of Rendered UI Layers or Frames in GitLab6.8 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab6.1 Medium
- postgresqlPostgreSQL PL/Perl environment variable changes execute arbitrary code8.8 High
- postgresql, debian linux +1 morePostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID4.2 Medium
- postgresqlPostgreSQL libpq retains an error message from man-in-the-middle3.1 Low
- postgresqlPostgreSQL row security below e.g. subqueries disregards user ID changes4.2 Medium
- apereo cas, central authentication service +1 moreApereo CAS login redirect5.3 Medium
- ibm security reaqta, security qradar edr +1 moreIBM Security ReaQta information disclosure5.3 Medium
- ibm security reaqta, security qradar edr +1 moreIBM Security ReaQta cross-site scripting3.1 Low
zlib-rscrates.io,libz-rs-syscrates.io,libz-rs-sys-cdylibcrates.io +2 morezlib-rs stack overflow during decompression with malicious input5.3 Medium- harborUser permission validation failure and disclosure of P2P preheat execution logs7.4 High
- ibm security soar, soar +1 moreIBM Security SOAR weak password recovery mechanism5.6 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab5.4 Medium
- gitlabIncorrect Authorization in GitLab8.5 High
- ays-pro chartify, chartify – wordpress chart plugin +1 moreChartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source9.8 Critical
- boa webserver, boa web server 0.94.14rc21 +1 moreBoa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7.5 High
- vaemendis ubooquity version 2.1.2, ubooquity +1 moreVaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor7.5 High
- Show moreLoading…