CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- drupal mailjetMailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-0626.6 Medium
- 115cms115cms pageAE.html cross site scripting5.3 Medium
- 115cms115cms appurladd.html cross site scripting5.3 Medium
- google androidIn process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out...9.8 Critical
- google androidIn the development options section of the Settings app, there is a possible authentication bypass...7.8 High
- google androidIn HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write...8.8 High
- google androidIn writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch...7.8 High
- google androidIn xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer...8.8 High
- google androidIn the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to...7.8 High
- google androidIn bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an...8.8 High
- 115cms115cms useradmin.html cross site scripting5.3 Medium
- 115cms115cms set.html cross site scripting5.3 Medium
- google androidIn multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut...7.8 High
- google androidIn query of DownloadManager.java, there is a possible read/write of arbitrary files due to a...7.1 High
- 115cms115cms file.html cross site scripting5.3 Medium
- 115cms115cms web_user.html cross site scripting5.3 Medium
- pglombardo password pusher, passwordpusher +1 morePassword Pusher's rate limiter can be bypassed by forging proxy headers5.3 Medium
- code4berry decoration management systemCode4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection5.3 Medium
- code4berry decoration management systemCode4Berry Decoration Management System User Permission user_permission.php5.3 Medium
- code4berry decoration management systemCode4Berry Decoration Management System User userregister.php permission5.3 Medium
- code4berry decoration management systemCode4Berry Decoration Management System User Image update_image.php access control5.3 Medium
- pega infinity, pegasystems pega infinity +1 morePega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of...9.1 Critical
- brainvireinfo dynamic url seoWordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- idioweb extensions for elementorWordPress Extensions for Elementor plugin <= 2.0.37 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- weather atlas widgetWordPress Weather Atlas Widget plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- sandeep verma html5 lyrics karaoke playerWordPress HTML5 Lyrics Karaoke Player plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- 2fauth2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview7.5 High
- 2fauth2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render6.1 Medium
- kevinb publishpress revisions: duplicate posts, submit, approve and schedule content changes, publishpress revisions: duplicate posts, submit, approve and schedule content changes, kevinb publishpress revisions duplicate posts submit approve and schedule content changes +2 morePublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure4.3 Medium
- migrate cloneClone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'8.8 High
- upkeeper solutions instant privilege access, instant privlege access +1 moreImproper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege...10.0 Critical
- upkeeper solutions instant privilege access, instant privlege access +1 moreImproper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege...10.0 Critical
- ollydbg, oilydbg oilydbg.exe, ollydbg ollydbg.exe +2 moreBuffer overflow in OllyDbg7.5 High
- saul morales pacheco banner systemWordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability8.8 High
- django cms association cms attributes fieldsStored XSS in django CMS Attributes Fields6.9 Medium
- deco.agency de:branding, de.branding +1 moreWordPress de:branding plugin <= 1.0.2 - Privilege Escalation vulnerability8.8 High
- userplusWordPress UserPlus plugin <= 2.0 - Privilege Escalation vulnerability9.8 Critical
- django cms association filerFile Upload Bypass in django Filer5.5 Medium
- aaron robbins post ideasWordPress Post Ideas plugin <= 2 - CSRF to SQL Injection vulnerability8.2 High
- webcodingplace ultimate classified listingsWordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability7.5 High
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker, wp project manager task team and project management plugin featuring kanban board and gantt charts +2 moreWP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion5.3 Medium
- navneil naicer bootscraperWordPress WordPress Bootscraper plugin <= 2.1.0 - Local File Inclusion vulnerability7.5 High
- official pro coders nblocksWordPress nBlocks plugin <= 1.0.2 - Local File Inclusion vulnerability7.5 High
- mark o'donnell team rostersWordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerability9.8 Critical
- bueno labs pvt. ltd. xpresslane fast checkout, xpresslane fast checkout +1 moreWordPress Xpresslane Fast Checkout plugin <= 1.0.0 - PHP Object Injection vulnerability9.8 Critical
- rajesh thanoch quick learnWordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability9.8 Critical
- masikonis geolocatorWordPress Geolocator plugin <= 1.1 - PHP Object Injection vulnerability9.8 Critical
- modeltheme qrmenu restaurant qr menu liteWordPress QRMenu Restaurant QR Menu Lite plugin <= 1.0.4 - PHP Object Injection vulnerability8.8 High
- buying buddy idx crmWordPress Buying Buddy IDX CRM plugin <= 1.2.8 - CSRF to PHP Object Injection vulnerability8.8 High
- wpopal opal woo custom product variationWordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability7.5 High
- Show moreLoading…