CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- altenergy power control softwareAltenergy Power Control Software status_zigbee get_status_zigbee sql injection5.3 Medium
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_mikrotikNo scoreassimpOSS-FuzzHeap-buffer-overflow in Assimp::FBXExporter::WriteObjectsNo scorefastjson2OSS-FuzzSecurity exception in com.alibaba.fastjson2.JSONReader.readObjectNo scorelemonldap-ngDebianA cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers...6.1 Medium- lemonldap-ngAn issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh...8.8 High
- veritas netbackupAn issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup...7.8 High
- veritas enterprise vaultAn issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It...5.4 Medium
- veritas enterprise vaultAn issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It...5.4 Medium
- veritas enterprise vaultAn issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It...5.4 Medium
- No product listedAn issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It...5.4 Medium
- No product listedAnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes...7.5 High
- delinea privilege managerDelinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.6.5 Medium
- bitcoin coreIn Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block,...6.5 Medium
- bitcoin coreIn Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a...5.3 Medium
- bitcoin coreBitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop)...7.5 High
- bitcoin coreBitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure...6.5 Medium
- bitcoin coreBitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service ...6.5 Medium
- bitcoin coreBitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis...6.5 Medium
- bitcoin coreBitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood...7.5 High
- bitcoin coreBitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory...7.5 High
- bitcoin coreIn Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a...7.5 High
- bitcoin coreIn Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific...5.3 Medium
- bitcoin coreBitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow ...7.5 High
- avscmsAn arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0...9.8 Critical
- avscmsAVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account.9.8 Critical
- jpressJpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of...9.8 Critical
- rws worldserverCross-Site Scripting (XSS) in the "Rules" functionality in WordServer 11.8.2 allows a remote...4.8 Medium
- rws worldserverAn XML External Entity (XXE) vulnerability in the Import object and Translation Memory import...6.5 Medium
- micro-star international msi center proInsecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a...7.8 High
- wondershare pdf reader pdf readerA NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544...5.5 Medium
- quickheal antivirus pro antivirus proIncorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated...6.5 Medium
- quickheal antivirus pro antivirus pro, quickheal total security total security +1 moreAn issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total...8.8 High
- erp management software, nuserp nus-m9 erp +1 moreAn arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP...7.5 High
- erp management software, nuserp nus-m9 erp +1 moreNUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- No product listedCross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute...6.1 Medium
- rsa netwitness platformIn RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a...7.5 High
- joinmastodon mastodonMastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header.7.5 High
- bitcoin coreBitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash)...7.5 High
- bitcoin coreminiupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for...9.8 Critical
- gnome gnome-maps, gnome maps maps +1 moreGnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json9.8 Critical
- red hat build of debezium, integration change data capture +1 moreDebezium: script injection via connector parameter5.9 Medium
flacOSS-FuzzHeap-buffer-overflow in process_page_No score- holy stone remote id module stone remote id moduleHoly Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application...7.5 High
- flagsmithIn Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.7.5 High
- flagsmithIn Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.7.5 High
- davor zeljkovic convert docx2postWordPress Convert Docx2post plugin <= 1.4 - Arbitrary File Upload vulnerability9.1 Critical
- halyra cdiWordPress CDI plugin <= 5.5.3 - Arbitrary File Upload vulnerability9.1 Critical
- clarisse k. writer helperWordPress Writer Helper plugin <= 3.1.6 - Arbitrary File Upload vulnerability9.9 Critical
- subhasis laha gallerioWordPress Gallerio plugin <= 1.01 - Arbitrary File Upload vulnerability9.9 Critical
- Show moreLoading…