CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- google libjxlOut of Bounds Memory Read/Write in libjxl6.9 Medium
- google libjxlResource exhaustion via Stack overflow in libjxl6.9 Medium
rutiecrates.io`parse_arguments` reads a caller-supplied pointer as a sliceNo score- flarum frameworkWifi information acquisition vulnerability in Framework Services1.0 Low
- flarum frameworkFramework Information Disclosure Vulnerability4.8 Medium
- enmseNMS TGZ File controller.py multiselect_filtering path traversal8.7 High
- eaton intelligent power protector (ipp), intelligent power protector +1 moreImproper access control mechanism in IPP6.7 Medium
- eaton intelligent power protectorInsufficient verification of authenticity in IPP5.1 Medium
- eaton intelligent power manager (ipm)Stored Cross-site Scripting reported in Intelligent Power Manager v15.2 Medium
- codezips e-commerce site, ecommerce site +1 moreCodezips E-Commerce Site search.php sql injection6.9 Medium
- welliamcao opsmanagewelliamcao OpsManage API Endpoint deploy_api.py deploy_host_vars deserialization5.3 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreKeycloak-quarkus-server: keycloak path trasversal2.7 Low
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +3 more +5 moreOrg.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process5.9 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreOrg.keycloak:keycloak-services: keycloak denial of service6.5 Medium
- codezips free exam hall seating management systemCodezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload5.3 Medium
- red hat build of keycloak, build of keycloak 24, build of keycloak 24.0.9 +3 more +5 moreOrg.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability4.7 Medium
- anisha farmaciacode-projects Farmacia usuario.php cross site scripting5.3 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection5.1 Medium
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +2 more +4 moreOpenshift-console: openshift console: server-side request forgery5.3 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection5.1 Medium
- syed balkhi wpformsWPForms < 1.9.1.6 - Admin+ Stored XSS3.5 Low
- imagely nextgen gallery, unknown photo gallery, sliders, proofing and themes +1 moreNextGEN Gallery < 3.59.5 - Admin+ Stored XSS4.8 Medium
- antongorodezkiy yadisk files, yadisk files files +1 moreYaDisk Files <= 1.2.5 - Admin+ Stored XSS3.5 Low
- antongorodezkiy yadisk files, yadisk files files +1 moreYaDisk Files <= 1.2.5 - Contributor+ Stored XSS via Shortcode6.8 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection5.1 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection5.1 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection5.1 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute6 command injection5.1 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 moreAutomation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.55.0 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute command injection5.1 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection5.1 Medium
- engenius enh1350ext, ens500-ac, ens620ext +3 more +5 moreEnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection5.1 Medium
- tenda i9, i9 firmware +1 moreTenda i9 GetIPTV websReadEvent null pointer dereference7.1 High
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System search-appointment.php sql injection6.9 Medium
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System add-customer.php sql injection6.9 Medium
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System view-appointment.php sql injection6.9 Medium
- No product listedWikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\,...6.1 Medium
- No product listedA cross-site scripting (XSS) vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1...6.1 Medium
- No product listedmasterstack_imgcap v0.0.1 was discovered to contain a SQL injection vulnerability via the...6.3 Medium
- taigaAn Open Redirect vulnerability in Taiga v6.8.1 allows attackers to redirect users to arbitrary...6.1 Medium
- taigaio taiga frontA Client-Side Template Injection (CSTI) vulnerability in the component /project/new/scrum of...8.0 High
- librechatlibre-chat Path Traversal vulnerability9.1 Critical
- adapt authoring tool authoring toolA NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows...9.8 Critical
- No product listedIncorrect access control in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows attackers with...4.3 Medium
- centreonAn issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before...7.2 High
- centreonAn issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24...7.2 High
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System edit-services.php sql injection6.9 Medium
openjdk-23Ubuntuopenjdk-23 vulnerabilitiesNo score- echarge salia plcc firmware, hardy-barth cph2 echarge firmware +1 moreUnauthenticated Remote Command Injection in eCharge Salia PLCC9.0 Critical
- echarge salia plcc firmware, hardy-barth cph2 echarge firmware +1 moreUnauthenticated Remote Command Injection8.8 High
- Show moreLoading…