CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- cisco telepresence video communication server (vcs) expressway, telepresence video communication server, telepresence video communication server software +2 moreCisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability7.4 High
- cisco asyncos, secure web appliance +1 moreCisco Secure Web Appliance Privilege Escalation Vulnerability6.3 Medium
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php4.8 Medium
- cisco smart software manager on-prem, smart software manager satellite +1 moreCisco Smart Software Manager On-Prem Privilege Escalation Vulnerability4.3 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +1 more +3 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability4.4 Medium
- cisco industrial network directorCisco Industrial Network Director Command Injection Vulnerability9.9 Critical
- cisco industrial network directorCisco Industrial Network Director File Permissions5.5 Medium
- cisco prime collaboration deploymentCisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability6.1 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +1 more +3 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability6.7 Medium
- librenmsLibreNMS has a stored XSS in ExamplePlugin with Device's Notes4.8 Medium
- cisco roomos, telepresence collaboration endpoint, telepresence endpoint software (tc/ce) +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability5.1 Medium
- cisco roomos software, roomos, telepresence endpoint software (tc/ce) +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability4.4 Medium
- librenmsLibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php7.5 High
- cisco roomos software, roomos, telepresence endpoint software (tc/ce) +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability4.4 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +1 more +3 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability4.3 Medium
- jetbrains webstormIn JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via...6.3 Medium
- code-projects online shop store, online shop stores +1 morecode-projects Online Shop Store signup.php cross site scripting6.9 Medium
- cisco broadworks network server, broadworks +1 moreCisco BroadWorks Network Server TCP Denial of Service Vulnerability8.6 High
- cisco modeling labsCisco Modeling Labs External Authentication Bypass Vulnerability9.1 Critical
- cisco ios xe catalyst sd-wan, ios xe sd-wan +1 moreCisco IOS and Cisco IOS XE SNMP Extended ACL Bypass Vulnerability5.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- ibm concert, concert software +1 moreIBM Concert cross-site scripting6.1 Medium
- zzcmsZZCMS Keyword Filtering ad_list.php sql injection5.1 Medium
- anisha job recruitmentcode-projects Job Recruitment reset.php sql injection6.9 Medium
- ibphoenix ibwebadminIBPhoenix ibWebAdmin Banco de Dados Tab database.php cross site scripting5.3 Medium
- landray ekpLandray EKP API Interface import.do deleteFile path traversal5.3 Medium
- landray ekpLandray EKP sysUiComponent.do delPreviewFile path traversal6.9 Medium
- tp-link vn020 f3v(t), vn020-f3v\(t\) firmware, vn020 f3v firmware +2 moreTP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow8.7 High
- dataprom informatics personnel attendance control systems (pacs) / access control security systems (acss), access control security systems, personnel attendance control systems +1 more +3 moreImproper Access Control in Dataprom Informatics' PACS-ACSS8.6 High
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS in openemr/openemr8.1 High
- usememos memos, usememos/memos +1 moreStored XSS in usememos/memos9.8 Critical
- phpipam, phpipam phpipam/phpipam +1 moreCross-site Scripting (XSS) in phpipam/phpipam3.5 Low
- craigk5n craigk5n/webcalendar, k5n webcalendar +1 moreStored XSS in craigk5n/webcalendar7.6 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreSession Fixation in chatwoot/chatwoot6.8 Medium
- pyload, pyload pyload/pyload, payload +2 moreOpen Redirection in pyload/pyload4.6 Medium
- phpipam, phpipam phpipam/phpipam +1 moreImproper Restriction of Excessive Authentication Attempts in phpipam/phpipam5.3 Medium
- gpac, gpac gpac/gpac +1 moreUse After Free in gpac/gpac5.9 Medium
- wallabag, wallabag wallabag/wallabag +1 moreCSRF in wallabag/wallabag6.5 Medium
- dolibarr, dolibarr dolibarr/dolibarr, erp\/crm +2 moreImproper Authorization in dolibarr/dolibarr4.3 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-site Scripting (XSS) in janeczku/calibre-web5.7 Medium
- calibre-web project calibre-web, janeczku janeczku/calibre-web +1 moreImproper Access Control in janeczku/calibre-web5.4 Medium
- calibre-web project calibre-web, janeczku janeczku/calibre-web +1 moreInformation Disclosure in janeczku/calibre-web4.3 Medium
- dompdf, dompdf dompdf/dompdf +1 moreImproper Restriction of XML External Entity Reference in dompdf/dompdf9.8 Critical
- sylius, sylius sylius/sylius +1 moreStored Cross-site Scripting (XSS) in sylius/sylius4.1 Medium
- chatwoot, chatwoot chatwoot/chatwoot +1 moreServer-Side Request Forgery (SSRF) in chatwoot/chatwoot7.9 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreStored Cross-site Scripting (XSS) in chatwoot/chatwoot7.8 High
- mdaemon email server, mdaemon +1 moreStored XSS vulnerability in MDaemon Email Server5.3 Medium
- synology beephotos, photos, photo station +2 moreImproper neutralization of special elements used in a command ('Command Injection') vulnerability...9.8 Critical
- cmorillas1 external database based actionsExternal Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass7.5 High
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation8.0 High
- Show moreLoading…