CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- cisco data center network managerCisco Data Center Network Manager Path Traversal Vulnerability4.6 Medium
- cisco data center network manager, prime data center network manager +1 moreCisco Data Center Network Manager Authorization Bypass Vulnerability6.3 Medium
- cisco email security appliance, secure email +1 moreCisco Email Security Appliance Denial Of Service Vulnerability5.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)9.3 Critical
- cisco catalyst sd-wan managerCisco SD-WAN vManage Information Disclosure Vulnerabilities5.3 Medium
- cisco network services orchestratorCisco Network Services Orchestrator Path Traversal Vulnerability5.3 Medium
- cisco ip phones with multiplatform firmware, session initiation protocol (sip) software, small business ip phones +34 more +36 moreCisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities6.5 Medium
- cisco utd snort ips engine softwareMultiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service Vulnerability7.4 High
- cisco catalyst sd-wan managerCisco SD-WAN vManage Information Disclosure Vulnerability6.5 Medium
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- cisco webex meetingsCisco Webex Meetings Unauthorized Distribution List Update Vulnerability4.3 Medium
- cisco asyncos, secure email and web manager +1 moreCisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability4.3 Medium
- cisco asr 5000 series softwareCisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability5.3 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability6.8 Medium
- cisco catalyst sd-wan manager, sd-wan vedge router +1 moreCisco SD-WAN Software Signature Verification Bypass Vulnerability4.9 Medium
- cisco adaptive security appliance (asa) softwareCisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services Interface Cross-Site Scripting Vulnerability6.1 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Software Privilege Escalation Vulnerability4.4 Medium
- urchenko drozd, drozd – addons for elementor +1 moreWordPress Drozd – Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- linearWordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cisco catalyst sd-wan managerA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could...4.3 Medium
- citeum openctiOpenCTI May Bypass Introspection Restriction6.5 Medium
- pressaholic wordpress video robot - the ultimate video importer, wordpress video robot +1 moreWordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability9.3 Critical
- shahjada wpdm – premium packages, wpdownloadmanager premium packages - sell digital products securely +1 moreWordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability7.6 High
- saad iqbal post smtpWordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability7.6 High
- peter ads booster by ads pro, scripteo ads booster +1 moreWordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability8.1 High
- bublick lis video gallery, lis video gallery +1 moreWordPress Lis Video Gallery plugin <= 0.2.1 - PHP Object Injection vulnerability9.8 Critical
- seh inu-100, utnserver pro, utnserver promax +2 moreMultiple Stored Cross-Site Scripting5.1 Medium
- nix solutions ltd anti-spam light, nixsolutions nix anti-spam light +1 moreWordPress NIX Anti-Spam Light plugin <= 0.0.4 - PHP Object Injection vulnerability9.8 Critical
- mindstien my geo posts freeWordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability9.8 Critical
- saso nikolov event tickets with ticket scannerWordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability9.9 Critical
- anton hoelstad wp quick setupWordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability9.9 Critical
- supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability9.1 Critical
- tr7 application security platform (asp), tr7cyberdefense asp +1 moreContainer Escape Vulnerability in TR7's Application Security Platform (ASP)8.7 High
- baratz innovación absysnetIDOR vulnerability in AbsysNet7.5 High
- kubeflow pipeline view, w pipeline view, pipelines +2 moreStored XSS in Kubeflow Pipeline View7.1 High
- korenix jetport 5601Path Traversal8.7 High
suse-manager-5.0-aarch64-proxy-httpd-imageSUSE,suse-manager-5.0-aarch64-proxy-salt-broker-imageSUSE,suse-manager-5.0-aarch64-proxy-squid-imageSUSE +33 more +35 moreSecurity update for SUSE Manager Server 5.0No score- suse manager server 5.0Database password leaked by systemd uyuni-server-attestation service5.7 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 +1 moreReflected XSS in Setup Wizard, Organization Credentials in spacewalk-web4.6 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 +1 moreReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web4.6 Medium
- Show moreLoading…