CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- allegraAllegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability7.2 High
- allegraAllegra unzipFile Directory Traversal Remote Code Execution Vulnerability7.2 High
- allegraAllegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability9.8 Critical
- allegraAllegra uploadFile Directory Traversal Remote Code Execution Vulnerability7.2 High
- allegraAllegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability9.8 Critical
- allegraAllegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability9.8 Critical
- allegraAllegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability7.2 High
- allegraAllegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability9.8 Critical
- allegraAllegra Hard-coded Credentials Authentication Bypass Vulnerability9.8 Critical
- netgear rax30, rax30 firmware +1 moreNETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- netgear rax30, rax30 firmware +1 moreNETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability7.5 High
- papercut ngPaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability7.2 High
- getsentry sentrySentry's improper error handling leaks Application Integration Client Secret5.3 Medium
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Read (CWE-125)5.5 Medium
- ipc unigy management systemIPC Unigy Management System HTTP Request server-side request forgery6.9 Medium
- kubernetes kubeletArbitrary command execution through gitRepo volume8.1 High
- argoproj argo-helmHelm Lacks Granularity in Workflow Role2.8 Low
- tornadoweb tornadoTornado has HTTP cookie parsing DoS vulnerability7.5 High
- riot-os riotRIOT-OS missing dhcpv6_opt_t minimum header length check7.5 High
- denoland stdXSS vulnerability in serveDir API of @std/http/file-server on POSIX systems5.1 Medium
- opentext secure content managerClient-side audit exclusion vulnerability5.1 Medium
- No product listedOutdated dependency on V8 found (see details)No score
- microfocus imanagerPossible Command injection Vulnerability in OpenText iManager8.8 High
- microfocus imanagerPossible Remote Code Execution Vulnerability OpenText iManager8.8 High
- microfocus imanagerPossible Local Privilege Escalation Vulnerability in OpenText iManager5.5 Medium
- microfocus imanagerPossible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager6.1 Medium
- microfocus imanagerPossible Reflected and Stored XSS in OpenText iManager6.1 Medium
- microfocus imanagerPossible External service interaction Vulnerability in OpenText iManager8.6 High
- microfocus imanagerPossible XSS in iManager URL for access Component7.6 High
- microfocus imanagerPossible XML External Entity Injection in OpenText iManager7.5 High
- microfocus imanagerPossible Command Injection in OpenText iManager8.8 High
- qnap photo stationPhoto Station6.3 Medium
- qnap photo stationPhoto Station6.3 Medium
- qnap photo stationPhoto Station6.3 Medium
- qnap photo stationPhoto Station6.3 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap notes station 3Notes Station 39.3 Critical
- qnap notes station 3Notes Station 38.7 High
- qnap notes station 3Notes Station 39.4 Critical
- qnap notes station 3Notes Station 38.4 High
- qnap ai coreQNAP AI Core7.9 High
- Show moreLoading…