CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenet/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT7.8 High
- linux, linux kernel +1 moredrm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mvm: fix 6 GHz scan construction5.5 Medium
- linux, linux kernel +1 morescsi: ufs: core: Fix another deadlock during RTC update5.5 Medium
- linux, linux kernel +1 moreio_uring/rw: fix missing NOWAIT check for O_DIRECT start write4.4 Medium
- linux, linux kernel +1 moredrm/i915/hdcp: Add encoder check in intel_hdcp_get_capability5.5 Medium
- linux, linux kernel +1 moredrm/i915/hdcp: Add encoder check in hdcp2_get_capability5.5 Medium
- linux, linux kernel +1 moreslub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof5.5 Medium
- linux, linux kernel +1 moreice: fix crash on probe for DPLL enabled E810 LOM5.5 Medium
- linux, linux kernel +1 moremptcp: init: protect sched with rcu_read_lock5.5 Medium
- linux, linux kernel +1 morearm64: dts: imx8ulp: correct the flexspi compatible string5.5 Medium
- linux, linux kernel +1 moreASoC: dapm: fix bounds checker error in dapm_widget_list_create5.5 Medium
- linux, linux kernel +1 morenet/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()7.8 High
- linux, linux kernel +1 moremctp i2c: handle NULL header address5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()5.5 Medium
- linux, linux kernel +1 moreipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()5.5 Medium
- linux, linux kernel +1 moreresource,kexec: walk_system_ram_res_rev must retain resource flags5.5 Medium
- automattic crowdsignal dashboard – polls, surveys & moreWordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- mike “mikeage” miller hebrew dateWordPress Hebrew Date plugin <= 2.1.0 - CSRF to Stored XSS vulnerability7.1 High
- deepak khokhar manage user columnsWordPress Manage User Columns plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- cliconomics exclusive content password protectWordPress Exclusive Content Password Protect plugin <= 1.1.0 - CSRF to Arbitrary File Upload vulnerability9.6 Critical
- huangye wudeng hacklog downloadmanagerWordPress Hacklog DownloadManager plugin <=2.1.4 - CSRF to Arbitrary File Upload vulnerability9.6 Critical
- creative motion disable admin notices individuallyWordPress Disable Admin Notices individually plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jerin k alexander events manager pro – extendedWordPress Events Manager Pro – extended plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- david garcia domain shardingWordPress Domain Sharding plugin <= 1.2.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- eftakhairul islam sticky social barWordPress Sticky Social Bar plugin <= 2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- syed umair hussain shah world prayer timeWordPress World Prayer Time plugin <= 2.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ivycat simple page specific sidebarsWordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- sam hoe sh slideshowWordPress SH Slideshow plugin <= 4.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- garmur while loadingWordPress While Loading plugin <= 3.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- a.ankit webriti custom login, webriti wordpress themes & plugins shop custom login +1 moreWordPress Webriti Custom Login plugin <= 0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- scott e. royalty admin sms alertWordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- z.com by gmo gmo social connectionWordPress Plugin Name: GMO Social Connection plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- sanjeev mohindra awesome shortcodes for genesisWordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- matt rude mdr webmaster toolsWordPress MDR Webmaster Tools plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- hints naver blogWordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- ivan9146 seo freeWordPress Seo Free plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- jcmlmorav advanced pdf generatorWordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerability7.1 High
- sam wilson addressbookWordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerability7.1 High
- ragaskar amazon associate filterWordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerability7.1 High
- hands01 e-shopsWordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themefuse maintenance mode, themefusecom themefuse maintenance mode +1 moreWordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability7.1 High
- scott @ mydollarplan.com random featured postWordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- patrick lumumba mobilizeWordPress Mobilize plugin <= 3.0.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- akira1891 update notificationsWordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- marckocher skip toWordPress Skip To plugin <= 2.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- apk.support apk downloaderWordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- litefeel flash show and hide boxWordPress Flash Show And Hide Box plugin <= 1.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- microkid custom author urlWordPress Custom Author URL plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- wp-buy wp popup window makerWordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- Show moreLoading…