CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server Custom defined credentials of external storages are sent back to the frontend4.6 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Authorization Bypass Vulnerability5.0 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Inventory Page Master.php cross site scripting5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server User password is available in memory of the PHP process1.8 Low
- cisco catalyst sd-wan managerCisco SD-WAN vManage Software XML External Entity Vulnerability6.4 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Command Injection Vulnerability6.5 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Software Information Disclosure Vulnerability6.5 Medium
- budgetcontrol gatewayAuth Token can be passed dummy or wrong the middleware response is 200 OK9.3 Critical
- cisco enterprise chat and emailCisco Enterprise Chat and Email Username Enumeration Vulnerability5.3 Medium
- cisco enterprise chat and emailCisco Enterprise Chat and Email Cross-Site Scripting Vulnerability6.1 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities5.8 Medium
- cisco firepower threat defense softwareCisco Firepower Threat Defense Command Injection Vulnerabilities6.7 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Configuration Information Disclosure Vulnerability4.3 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Configuration Information Disclosure Vulnerability4.3 Medium
- ibm engineering insights, engineering lifecycle optimization - engineering insights +1 moreIBM Engineering Insights XML external entity injection8.2 High
- cisco prime access registrarCisco Prime Access Registrar Appliance Cross-Site Scripting Vulnerability5.5 Medium
- cisco enterprise chat and emailCisco Enterprise Chat and Email Cross-Site Scripting Vulnerability6.1 Medium
- cisco webex meetingsCisco Webex Meetings Cross-Site Scripting Vulnerability6.1 Medium
- cisco enterprise chat and emailCisco Enterprise Chat and Email Open Redirect Vulnerability4.7 Medium
- anisha farmaciacode-projects Farmacia adicionar-cliente.php cross site scripting5.3 Medium
- cisco redundancy configuration managerCisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability5.3 Medium
- cisco redundancy configuration managerCisco Redundancy Configuration Manager Debug Remote Code Execution Vulnerability8.1 High
- cisco secure workloadCisco Tetration Command Injection Vulnerability6.5 Medium
- cisco carrier packet transport, catalyst sd-wan manager, catalyst sd-wan +8 more +10 moreA vulnerability in the implementation of the CLI on a device that is running ConfD could allow an...8.8 High
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php4.8 Medium
- librenmsLibreNMS has an Authenticated OS Command Injection9.1 Critical
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php4.8 Medium
- librenmsLibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php4.8 Medium
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php4.8 Medium
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php4.8 Medium
- librenmsLibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints4.8 Medium
- ibm sterling secure proxyIBM Sterling Secure Proxy directory traversal7.5 High
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php4.8 Medium
- cisco prime infrastructure, evolved programmable network manager, evolved programmable network manager (epnm) +2 moreCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability6.1 Medium
- cisco secure network analyticsSecure Network Analytics Cross-Site Scripting Vulnerability6.1 Medium
- cisco cyber vision, firepower threat defense software, utd snort ips engine software +2 more +4 moreMultiple Cisco Products Snort Modbus Denial of Service Vulnerability7.5 High
- cisco prime infrastructure, evolved programmable network manager, evolved programmable network manager (epnm) +2 moreCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal Vulnerability6.5 Medium
- cisco ata 190 firmware, analog telephone adaptor (ata) software +1 moreCisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability5.3 Medium
- librenmsLibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php4.8 Medium
- cisco roomos software, roomos, telepresence ce software +3 more +5 moreCisco Touch 10 Device Insufficient Identity Verification Vulnerability6.8 Medium
- cisco telepresence video communication server (vcs) expressway, telepresence video communication server +1 moreCisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability7.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability4.3 Medium
- cisco ios xr softwareCisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability6.0 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability6.1 Medium
- anisha farmaciacode-projects Farmacia editar-produto.php sql injection5.3 Medium
- anisha farmaciacode-projects Farmacia editar-cliente.php sql injection5.3 Medium
- cisco broadworksCisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability5.4 Medium
- cisco telepresence endpoint software (tc/ce), telepresence collaboration endpoint +1 moreCisco Touch 10 Device Downgrade Attack Vulnerability6.5 Medium
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php4.8 Medium
- librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php4.8 Medium
- Show moreLoading…