CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- qnap qurouterQHora9.5 Critical
- qnap qurouterQHora7.3 High
- qnap qulog centerQuLog Center8.7 High
- qnap media streaming add-onMedia Streaming add-on6.9 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero7.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero7.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- apache answerApache Answer: Predictable Authorization Token Using UUIDv12.6 Low
- phpInteger overflow in the firebird and dblib quoters causing OOB writes9.8 Critical
- phpConfiguring a proxy in a stream context might allow for CRLF injection in URIs4.8 Medium
- phpSingle byte overread with convert.quoted-printable-decode filter4.8 Medium
- ibm engineering systems design rhapsody - model manager, engineering systems design rhapsody +1 moreIBM Engineering Systems Design Rhapsody - Model Manager9.8 Critical
- rustls project rustls, red hat trusted artifact signer +1 moreRustls: rustls network-reachable panic in `acceptor::accept`5.3 Medium
- ibm powervm hypervisorIBM PowerVM Hypervisor information disclosure5.1 Medium
- hewlett packard enterprise hpe nonstop disk utilHPE NonStop DISK UTIL, Local Denial of Service vulnerability6.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 morePermissions, Privileges, and Access Controls in Data6.7 Medium
- cradle e-commerceSQLi in Special Minds' e-Commerce6.5 Medium
- aureus erpSQLi in Firmanet Software's ERP8.2 High
- phpLeak partial content of the heap through heap buffer over-read in mysqlnd5.8 Medium
- php, netapp ontap +1 moreOOB access in ldap_escape9.8 Critical
- geomywp geo my wordpress, unknown geo my wp, gmw-premium-settings +1 more +3 moreGEO My WordPress < 4.5 - Admin+ Arbitrary File Upload6.6 Medium
- bplugins feeds for twitter – embed social media posts with live updatesEasy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure4.3 Medium
- mailmunch, mailmunch – grow your email list +1 moreMailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting6.1 Medium
- codename065 premium packages – sell digital products securelyPremium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg6.1 Medium
- wowdevs sky addons for elementor, sky addons – elementor addons with widgets & templates +1 moreSky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options…8.1 High
- gallerycreator mixed media gallery blocksGallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting5.5 Medium
- codelizarplugs ultimate youtube video & shorts player with vimeoUltimate YouTube Video & Shorts Player With Vimeo <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Setting Exposure4.3 Medium
- wowdevs sky addons for elementor, sky addons – elementor addons with widgets & templates +1 moreSky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Lim…8.1 High
- cesarmaeso control horasControl horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- dell edge gateway 5200, edge gateway 5200 firmware, intel management engine firmware update utility +2 moreDell Edge Gateway 5200 (Coffee Lake S), versions prior to 12.0.94.2380, contains an Exposure of...6.7 Medium
python2.7Ubuntupython2.7 regresssionsNo score- aiphone co., ltd. ixg-2c7, ixg-2c7-l +1 moreAIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and...5.5 Medium
- aiphone co., ltd. ix-ba, ix-bau, ix-bb +53 more +55 moreUse of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System...5.4 Medium
- aiphone co., ltd. ix-ba, ix-bau, ix-bb +51 more +53 moreInsufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network...6.5 Medium
- aiphone co., ltd. ix-ba, ix-bau, ix-bb +51 more +53 moreOS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent...8.0 High
- churchcrmEventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. An attacker can exploit...9.8 Critical
- crmebCRMEB v5.4.0 is vulnerable to Arbitrary file read in the save_basics function which allows an...7.5 High
- totolink x6000r firmwareIn TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used...9.8 Critical
- No product listedIncorrect access control in Instrument Cluster KIA Seltos Software v1.0, Hardware v1.0 allows...6.7 Medium
- No product listedAn issue in Instrument Cluster KIA Seltos Software v1.0, Hardware v1.0 allows attackers to...6.7 Medium
- No product listedAn issue in Instrument Cluster KIA Seltos Software v1.0, Hardware v1.0 allows attackers to cause...5.3 Medium
- No product listedCross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v...5.4 Medium
- owncloud anroid apkAn issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate...6.8 Medium
- No product listedAn issue was discovered in Centreon Web through 24.10. A stored XSS was found in the user...6.2 Medium
- meabillis cms cmsIncorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address...7.5 High
- No product listedA reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690...6.1 Medium
- Show moreLoading…