CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- gogsRemote Code Execution in Gogs8.8 High
- hewlett packard enterprise (hpe) hpe athonet coreAn invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in...5.9 Medium
- hewlett packard enterprise (hpe) hpe athonet coreAn invalid memory access when handling the ENB Configuration Transfer messages containing invalid...5.9 Medium
- hewlett packard enterprise (hpe) hpe athonet coreAn invalid memory access when handling the ProtocolIE_ID field of E-RAB Setup List Context SURes...5.9 Medium
- hewlett packard enterprise (hpe) hpe athonet coreAn invalid memory access when handling a UE Context Release message containing an invalid UE...5.9 Medium
- hewlett packard enterprise (hpe) hpe athonet coreAn invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages...5.9 Medium
- hewlett packard enterprise (hpe) hpe athonet coreAn invalid memory access when handling the ProtocolIE_ID field of E-RAB...5.9 Medium
- athonet vepc mmc, hewlett packard enterprise (hpe) hpe athonet core +1 moreAn invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication...5.9 Medium
- No product listedStack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine...5.3 Medium
- openairinterface cn5g amfAn uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF...6.5 Medium
- No product listedStack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine...5.3 Medium
- openairinterface cn5g amfAn uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers...6.5 Medium
- open5gsA reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to...7.5 High
- oai epc federation epc federation, openairinterface magma +1 moreReachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0...7.5 High
- magma, oai epc federation epc federation +1 moreMagma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the...6.5 Medium
- No product listedThe web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where...4.6 Medium
- google androidIn the autofill service, the package name that is provided by the app process is trusted...5.5 Medium
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreLife2000 ventilator and Service PC lack sufficient audit logging capabilities10.0 Critical
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreLife2000 service tools for test and calibration do not support user authentication10.0 Critical
- henrik hoff wp course managerWordPress WP Course Manager plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- geekrmx twitter @anywhere plusWordPress Twitter @Anywhere Plus plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- appointmindWordPress Appointmind plugin <= 4.0.0 - CSRF to Stored XSS vulnerability7.1 High
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreLife2000 Ventilator microcontroller lacks memory protection9.3 Critical
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreLife2000 Ventilator does not perform proper file integrity checks when adopting firmware updates9.3 Critical
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreDebug port on Life2000 Ventilator serial interface is enabled by default9.3 Critical
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreClinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator9.3 Critical
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreNo limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator9.3 Critical
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreImproper data protection on Life2000 ventilator serial interface9.3 Critical
- ciprian popescu w3p seoWordPress W3P SEO plugin < 1.8.6 - CSRF to Stored XSS vulnerability7.1 High
- platform.ly officialWordPress Platform.ly Official plugin <= 1.1.3 - CSRF to Stored XSS vulnerability7.1 High
- fraudlabs pro sms verification, fraudlabspro fraudlabs pro sms verification +1 moreWordPress FraudLabs Pro SMS Verification plugin <= 1.10.1 - CSRF to Stored XSS vulnerability7.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability5.4 Medium
- openafsPreallocated buffer overflows in XDR responses7.7 High
- openafsFileserver crash and possible information leak on StoreACL/FetchACL6.5 Medium
- openafsTheft of credentials in Unix client PAGs8.4 High
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreEmail Bombing Vulnerability in lunary-ai/lunary7.5 High
- optimal access kbucketWordPress KBucket plugin <= 4.2.2 - Arbitrary File Upload vulnerability9.9 Critical
- hive support support, hivesupport hive support +1 moreWordPress Hive Support – WordPress Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin <= 1.1.1 - Arbitrary File Upload vulnerability9.9 Critical
- webtechglobal easy csv importer betaWordPress Easy CSV Importer plugin <= 7.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- team devexhub devexhub galleryWordPress Devexhub Gallery plugin <= 2.0.1 - Arbitrary File Upload vulnerability10.0 Critical
- dothattask do that taskWordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerability10.0 Critical
- arttia creative datasets manager by arttia creative, datasets manager +1 moreWordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability10.0 Critical
- cmsminds boat rental plugin for wordpressWordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability10.0 Critical
- bdthemes instant image generatorWordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability10.0 Critical
- labs64 digipassWordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability7.5 High
- faizalbahasan kineticpay for woocommerceWordPress kineticPay for WooCommerce plugin <= 2.0.8 - Arbitrary File Upload vulnerability10.0 Critical
- softpulse infotech picsmizeWordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- cliConnecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer8.0 High
- medma technologies matix popup builderWordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability9.8 Critical
- joplin project joplinRemote Code Execution on click of <a> Link in markdown preview7.7 High
- Show moreLoading…