CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- gladinet centrestackAn LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690...9.8 Critical
- wowza streaming engineApplication Delete Path Traversal in Wowza Streaming Engine6.9 Medium
- wowza streaming engineApplication Copy Path Traversal in Wowza Streaming Engine8.2 High
- wowza streaming engineApplication Creation Path Traversal in Wowza Streaming Engine5.1 Medium
- wowza streaming engineStored Cross-Site Scripting in Wowza Streaming Engine8.7 High
- flowiseFlowise - Remote Code Execution via overrideConfig Parameter9.3 Critical
- wowza streaming engineStream Target Remote Code Execution in Wowza Streaming Engine9.4 Critical
- oracle oracle-sidecar, palantir com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar +1 moreMultiple authenticated SQL injections in oracle-sidecar6.8 Medium
- linux, linux kernel +1 moresmb: client: Fix use-after-free of network namespace.9.8 Critical
- linux, linux kernel +1 moreRDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES9.8 Critical
- linux, linux kernel +1 morenvme-multipath: defer partition scanning7.5 High
- linux, linux kernel +1 morevirtio_pci: Fix admin vq cleanup by using correct info pointer8.4 High
- linux, linux kernel +1 morebpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx7.8 High
- linux, linux kernel +1 moreafs: Fix lock recursion7.5 High
- linux, linux kernel +1 moreLoongArch: KVM: Mark hrtimer to expire in hard interrupt context5.5 Medium
- goauthentik authentikauthentik performs insufficient validation of OAuth scopes6.4 Medium
- goauthentik authentikauthentik has an insecure default configuration for OAuth2 Redirect URIs7.9 High
- goauthentik authentikauthentik allows a timing attack due to missing constant time comparison for metrics view6.3 Medium
- drakkan sftpgoSFTPGo allows administrators to restrict command execution from the EventManager5.1 Medium
- argoproj argo-helmArgo Workflows Chart: Excessive Privileges in Workflow Role8.3 High
- hiyouga llama-factoryLLama Factory Remote OS Command Injection Vulnerability7.5 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- automated logic webctrl, carrier i-vu +1 moreAutomated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload10.0 Critical
- automated logic webctrl, carrier i-vu +1 moreAutomated Logic WebCTRL and Carrier i-Vu Open Redirect5.9 Medium
- gocastGoCast OS Command Injection vulnerability9.8 Critical
- gocastAn OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially...9.8 Critical
- gocastA lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A...9.8 Critical
- mc technologies lr router, mc-technologies mc lr router firmware +1 moreThree OS command injection vulnerabilities exist in the web interface I/O configuration...7.2 High
- mc technologies lr router, mc-technologies mc lr router firmware +1 moreThree OS command injection vulnerabilities exist in the web interface I/O configuration...7.2 High
- mc technologies lr router, mc-technologies mc lr router firmware +1 moreThree OS command injection vulnerabilities exist in the web interface I/O configuration...7.2 High
- mc technologies lr router, mc-technologies mc lr router firmware +1 moreAn OS command injection vulnerability exists in the web interface configuration upload...7.2 High
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System about-us.php sql injection6.9 Medium
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System add-services.php sql injection6.9 Medium
- cayenne anonymous restricted contentAnonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- mra13 simple membershipSimple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor5.3 Medium
- kion computer exchange programs softwareReflected XSS in Kion Computer's KION Exchange Programs Software5.5 Medium
- teknogis informatics closed circuit vehicle tracking software, close circuit vehicle tracking software +1 moreSQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software7.5 High
- 1000 projects bookstore management system1000 Projects Bookstore Management System forget_password_process.php sql injection6.9 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System expcatedit.php sql injection5.3 Medium
- avl-ditest-diagdev libdoipAVL-DiTEST-DiagDev libdoip DoIPConnection.cpp reactOnReceivedTcpMessage null pointer dereference5.1 Medium
- idccmsidcCMS classProvCity.php GetCityOptionJs cross site scripting5.3 Medium
- smarttek smart doctorStored XSS in Smarttek Informatics' Smart Doctor4.8 Medium
- wowdevs sky addons for elementor, sky addons – elementor addons with widgets & templates +1 moreSky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template4.3 Medium
- jetmonsters stratum widgets for elementorStratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates4.3 Medium
- pandora fms fms, pandorafms pandora fms +1 moreCommand Injection leading to RCE via LDAP Misconfiguration6.9 Medium
- getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsellEasiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting6.1 Medium
- wiresharkBuffer Over-read in Wireshark7.8 High
- wiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark7.8 High
- apache nifiApache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log6.9 Medium
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…