CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- arm mbedAn issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software...7.5 High
- arm mbedAn issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the...7.5 High
- arm mbedAn issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software...7.5 High
- esoft planner, esoftplanner esoft planner +1 moreIncorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions...7.5 High
- esoftplanner esoft plannerA stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows...6.1 Medium
- esoftplanner esoft plannerA reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner...6.1 Medium
- esoft planner, esoftplanner esoft planner +1 moreA discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login?...5.3 Medium
- esoftplanner esoft plannerA reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft...6.1 Medium
- esoft planner, esoftplanner esoft planner +1 moreAn issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows...7.5 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A reflected Cross-Site...6.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.0. Zimbra Webmail (Modern UI) is...6.1 Medium
- kasda kw5515 firmwareAn issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker...9.1 Critical
- kasda kw6512 firmwareMultiple OS Command Injection vulnerabilities affecting Kasda KW6512 router software version...9.1 Critical
- google androidIn the getHost() function of UriTest.java, there is the possibility of incorrect web origin...9.8 Critical
- apple ipados, macos, safari +6 more +8 moreA cookie management issue was addressed with improved state management. This issue is fixed in...6.3 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2...8.8 High
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- google androidIn the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write....8.8 High
- google androidIn sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an...7.5 High
- google androidIn parse of M3UParser.cpp there is a possible resource exhaustion due to improper input...6.5 Medium
- kalmang dynamic widgetsWordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- w3speedsterWordPress W3SPEEDSTER plugin <= 7.25 - Cross Site Request Forgery (CSRF) vulnerability6.3 Medium
- wpzoom beaver builder addons by wpzoom, beaver builder addons +1 moreWordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hyscaler wp roles at registrationWordPress WP Roles at Registration plugin <= 0.23 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- realmag777 husky – products filter professional for woocommerce, pluginus woocommerce products filter +1 moreHUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter6.1 Medium
- google androidIn ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper...8.8 High
- google androidIn createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there...7.8 High
- google androidIn startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a...7.8 High
- google admob, android +1 moreIn CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a...7.8 High
- google androidIn writeInplace of Parcel.cpp, there is a possible information leak across processes, using...5.5 Medium
- google androidIn BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure...5.5 Medium
- google androidIn l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing...7.5 High
- google androidIn f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper...7.8 High
- google androidIn removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper...5.5 Medium
- fedora-python lxml html cleanHTML Cleaner allows crafted scripts in special contexts like svg or math to pass through7.7 High
- google androidIn decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing...8.8 High
- google androidIn analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds...5.5 Medium
- google andrioid, android +1 moreIn smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code...8.8 High
- zoom meeting sdk, meeting software development kit, rooms +6 more +8 moreZoom Apps - Improper Input Validation6.5 Medium
- ibm concert, concert software +1 moreIBM Concert Software improper access controls4.3 Medium
- zoom meeting software development kit, rooms, rooms controller +4 more +6 moreZoom Apps - Uncontrolled Resource Consumption4.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software SQL injection7.6 High
- zoom meeting software development kit, rooms, rooms controller +6 more +8 moreZoom Apps - Improper Input Validation8.1 High
- google androidIn HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due...7.8 High
- ibm concert, concert software +1 moreIBM Concert Software information disclosure4.3 Medium
- google androidIn cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a...7.8 High
- google androidIn the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface...6.4 Medium
- google androidIn download.c there is a special mode allowing user to download data into memory and causing...7.3 High
- google androidIn bootloader there is fastboot command allowing user specified kernel command line arguments....7.3 High
- Show moreLoading…