CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- hcl software workload schedulerIBM Workload Scheduler information disclosure5.5 Medium
- dell wyse management suite, wyse management suite repository +1 moreDell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization...5.9 Medium
- dell wyse management suiteDell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of...7.6 High
- dell wyse management suiteDell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by...7.6 High
- tyche softwares booking & appointment plugin for woocommerce, tychesoftwares booking and appointment plugin for woo commerce +1 moreBooking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update8.8 High
- codeastro hospital management system, hospital management system project management system +1 moreCodeAstro Hospital Management System his_doc_register_patient.php cross site scripting5.3 Medium
- codeastro hospital management system, hospital management system project management system +1 moreCodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting5.3 Medium
- ibm data virtualization manager for z/os, data virtualization manager for z-os, data virtualization manager for z\/os +2 moreIBM Data Virtualization Manager code execution8.5 High
- codeastro hospital management system, hospital management system project management system +1 moreCodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting5.3 Medium
checker-frameworkOSS-FuzzSecurity exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategoriesNo score- codeastro hospital management systemCodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting5.3 Medium
- spipA cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows...4.8 Medium
- spipAn authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3...6.3 Medium
- taigaio taiga frontA CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via...8.8 High
- phpgurukul vehicle parking management systemA stored cross-site scripting (XSS) vulnerability was identified in PHPGURUKUL Vehicle Parking...6.1 Medium
- red hat fast datapath for red hat enterprise linux 7, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +14 more +16 moreTuned: improper sanitization of `instance_name` parameter of the `instance_create()` method5.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +5 more +7 moreTuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root7.8 High
- tcpdf project tcpdfTCPDF Local File Inclusion vulnerability6.2 Medium
- qiwenshare qiwen-fileqiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component ...9.8 Critical
- codeastro hospital management system, hospital management system project management system +1 moreCodeAstro Hospital Management System his_doc_update-account.php unrestricted upload5.3 Medium
- cloud native computing foundation keycloak-connectorReflected XSS Vulnerability in Authentication Flow URL Handling in @dapperduckling/keycloak-connector-server8.1 High
- 1000 projects bookstore management system1000 Projects Bookstore Management System cross-site request forgery6.9 Medium
aiocpaPyPIaiocpa contains credential harvesting code8.3 High- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morefs: Fix uninitialized value issue in from_kuid and from_kgid5.5 Medium
- linux, linux kernel +1 morenvme: tcp: avoid race between queue_lock lock and destroy7.8 High
- linux, linux kernel +1 morebpf: Check validity of link->type in bpf_link_show_fdinfo()7.1 High
- linux, linux kernel +1 moredrm/xe/ufence: Prefetch ufence addr to catch bogus address7.8 High
- linux, linux kernel +1 moremm: krealloc: Fix MTE false alarm in __do_krealloc5.5 Medium
- linux, linux kernel +1 moremm: resolve faulty mmap_region() error path behaviour7.8 High
org.keycloak:keycloak-coreMavenKeycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination7.1 HighaiocpaPyPIaiocpa 0.1.13 contains credential harvesting codeNo score- joplin project joplinLack of validation on openExternal allows 1 click remote code execution in joplin7.3 High
- autolabdownload_all_submissions allows student to download another student's submissions in Autolab7.1 High
- boidcmsReflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS5.3 Medium
- ngtcp2Acks not validated before logged to qlog leads to buffer overflow in ngtcp28.2 High
- ciliumLayer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium5.8 Medium
- denoland denoImproper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator5.4 Medium
- blackberry athocVulnerability in Management Console Impacts BlackBerry AtHoc4.6 Medium
- universal audio uaconnectmacOS Universal Audio (UAConnect) <= 2.7.0 - Local Privilege Escalation7.8 High
- sensei mac cleanermacOS Sensei Mac Cleaner Local Privilege Escalation via PID Reuse - Race Condition Attack7.8 High
- ibm jazz foundationIBM Jazz Foundation improper access control5.3 Medium
- ibm jazz foundationIBM Jazz Foundation cross-site scripting6.1 Medium
- svelte sveltekit, sveltejs kit +1 moreCross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit2.0 Low
- svelte sveltekit, sveltejs kit +1 moreUnescaped error message included on error page in SvelteKit2.0 Low
dawidd6/action-download-artifactGitHub ActionsArtifact poisoning vulnerability in action-download-artifact v5 and earlier8.7 Highgithub.com/taurusgroup/multi-party-sigGoTaurus multi-party-sig has OT-based ECDSA protocol implementation flawsNo score- devolutions remote desktop managerIncorrect authorization in the permission validation component of Devolutions Remote Desktop...5.4 Medium
- devolutions remote desktop managerImproper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager...5.4 Medium
- devolutions remote desktop managerIncorrect authorization in the add permission component in Devolutions Remote Desktop Manager...4.3 Medium
- lfprojects mlflowExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udf7.0 High
- Show moreLoading…