CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- dasmaeh recipepress reloadedRecipePress Reloaded <= 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- codename065 premium packages – sell digital products securelyPremium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode6.4 Medium
- feedmymedia tour operator, lightspeedwp lsx tour operator +1 moreLSX Tour Operator <= 1.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- mikewire rocksolid announcement & notification banner – bulletinBulletin Announcements <= 3.11.7 - Reflected Cross-Site Scripting6.1 Medium
- peepso community by peepso – download from peepso.comCommunity by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting6.1 Medium
- broadcom brocade sannav, brocade sannav +1 moreSwitch passwords and authorization IDs are printed in the embedded MLS DB file5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak Key-exchange algorithms6.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreconfiguration secrets are logged in support-save4.4 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
readstatOSS-FuzzNegative-size-param in extract_mr_dataNo scorepostgresql-15Debianpostgresql-15 - regression updateNo scorepostgresql-13Debianpostgresql-13 - regression updateNo score- point cloud library pclWhile parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std:...7.5 High
- open62541Open62541 v1.4.6 is has an assertion failure in fuzz_binary_decode, which leads to a crash.7.5 High
- ntop ntopngA heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS...6.2 Medium
- assimpA heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in...6.2 Medium
- totolink a810r firmwareTOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.7.8 High
- totolink a810r firmwareTOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi.8.8 High
- totolink ex200 firmwareTOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in...6.3 Medium
- iptraf-ngiptraf-ng 1.2.1 has a stack-based buffer overflow.7.5 High
- husrev blackboardAn arbitrary file upload vulnerability in the component \Users\username.BlackBoard of BlackBoard...9.8 Critical
- omegatAn arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows...9.8 Critical
- gelcon modbusmechanicAn arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute...8.8 High
- gibbonedu gibbon, gibbon core +1 moreCross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a...3.5 Low
- alist project alistAn issue in alist-tvbox v1.7.1 allows a remote attacker to execute arbitrary code via the /atv...6.8 Medium
- tp-link tl-ipc42c firmwareTP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of...8.0 High
- linksys e3000 firmwareLinksys E3000 1.0.06.002_US is vulnerable to command injection via the diag_ping_start function.8.0 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS)...6.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A Cross-Site Scripting (XSS)...6.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting...4.8 Medium
- synacor zimbra collaboration suiteAn issue was discovered in webmail in Zimbra Collaboration (ZCS) through 10.1. An attacker can...6.1 Medium
- synacor zimbra collaboration suiteIn Zimbra Collaboration (ZCS) 9.0 and 10.0, a vulnerability in the Webmail Modern UI allows...4.8 Medium
- influxdata influxdbInfluxDB through 2.7.10 allows allAccess administrators to retrieve all raw tokens via an "influx...9.1 Critical
- apereo opencastSearching Opencast may cause a denial of service6.5 Medium
- okta privileged access server agent (sftd), privileged access server agent sftd +1 moreOkta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerabil…7.1 High
com.querydsl:querydsl-aptRoot,com.querydsl:querydsl-jpaRoot,io.root.com.querydsl:querydsl-aptRoot +1 more +3 moreDuplicate Advisory: Querydsl SQL/HQL injection9.8 Critical- litestarLitestar allows unbounded resource consumption (DoS vulnerability)8.2 High
- red hat cert-manager operator for red hat openshift, cryostat 3, multicluster engine for kubernetes +5 more +7 moreCert-manager: potential dos when parsing specially crafted pem inputs4.4 Medium
- suse rancherRancher Helm Applications may have sensitive values leaked6.2 Medium
cosmossdk.io/mathGoASA-2024-010: cosmossdk.io/math: Mismatched bit-length validation in sdk.Int and sdk.Dec can lead to panic8.7 High- suse rancherUsers can issue watch commands for arbitrary resources7.7 High
- google androidIn setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn...5.5 Medium
- google androidIn hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing...6.5 Medium
- google androidIn l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing...6.5 Medium
- google androidIn l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a...7.5 High
- google androidIn bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a...6.5 Medium
- google androidIn intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer...6.5 Medium
- apache traffic server, google android +1 moreIn bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an...6.5 Medium
- google androidIn bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper...6.5 Medium
- google androidIn process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out...9.8 Critical
- Show moreLoading…