CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-15 "External Control of System or Configuration Setting" was discovered affecting the...7.2 High
- projectsendProjectSend Unauthenticated Configuration Modification9.8 Critical
- man4toman پارسی دیت – parsi dateParsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter6.1 Medium
needrestartUbuntuneedrestart regressionNo score- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 moreImproper Authentication in TrustZone7.8 High
- qualcomm 215 firmware, mdm9206 firmware, mdm9607 firmware +20 more +22 moreConfigurations in Android Build7.5 High
- qualcomm 9206 lte modem firmware, apq8017 firmware, ar6003 firmware +3 more +5 moreUse After Free in WLAN6.8 Medium
- qualcomm sd 450 firmware, sd 625 firmware, sd 820 firmware +5 more +7 moreMultiple buffer overread vulnerabilities in WLAN8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 835 firmware +3 more +5 moreBuffer overwrite due to improper input validation in WLAN host7.8 High
- qualcomm msm8909w firmware, msm8996au firmware, sd 205 firmware +25 more +27 moreUse of Out-of-range Pointer Offset in Video8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 835 firmware +3 more +5 moreImproper Authentication in Core9.8 Critical
- jonk @ follow me darling sp*tify play button for wordpressSpotify Play Button for WordPress <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode6.4 Medium
- sayedulsayem support svg – upload svg files in wordpress without hassleSupport SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload6.4 Medium
- booster for woocommerce, pluggabl booster for woocommerce – pdf invoices, abandoned cart, variation swatches & 100+ tools +1 moreBooster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode5.5 Medium
- bluenotes bne gallery extendedBNE Gallery Extended <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gallery Shortcode6.4 Medium
- sharp corporation multiple mfps (multifunction printers), sharp bp-30c25, bp-30c25t +47 more +49 moreOut-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple...7.5 High
- sharp bp-b537wr, bp-b540wr, bp-b547wd +20 more +22 moreThe web interface of the affected devices process some crafted HTTP requests improperly, leading...7.5 High
- sharp corporation multiple mfps (multifunction printers)Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation...7.4 High
- sharp corporation multiple mfps (multifunction printers)API keys for some cloud services are hardcoded in the "main" binary. As for the details of...9.1 Critical
- sharp corporation multiple mfps (multifunction printers)There are several hidden accounts. Some of them are intended for maintenance engineers, and with...9.1 Critical
- sharp corporation multiple mfps (multifunction printers)The web interface of the affected devices is designed to hide the LDAP credentials even for...5.3 Medium
- sharp corporation multiple mfps (multifunction printers)Admin authentication can be bypassed with some specific invalid credentials, which allows logging...5.3 Medium
- sharp corporation multiple mfps (multifunction printers)"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. ...9.1 Critical
- sharp corporation multiple mfps (multifunction printers)Improper processing of some parameters of installed_emanual_list.html leads to a path traversal...7.5 High
- sharp corporation multiple mfps (multifunction printers)User passwords are decrypted and stored on memory before any user logged in. Those decrypted...5.9 Medium
- sharp corporation multiple mfps (multifunction printers)User passwords are decrypted and stored on memory before any user logged in. Those decrypted...5.9 Medium
- sharp corporation multiple mfps (multifunction printers)User passwords are decrypted and stored on memory before any user logged in. Those decrypted...5.9 Medium
- sharp corporation multiple mfps (multifunction printers)Affected devices create coredump files when crashed, storing them with world-readable permission....5.9 Medium
- sharp corporation multiple mfps (multifunction printers)The web interface of the affected devices processes a cookie value improperly, leading to a stack...9.0 Critical
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreBooking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload7.2 High
- creativemindssolutions cm business directory – optimise and showcase local business, cm e-mail blacklist – simple email filtering for safer registration, cm header and footer – add custom scripts and styles to your header and footer with ease +4 more +6 moreMultiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode6.1 Medium
- axis os, os 2022, os 2024 +2 moreErik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi...3.8 Low
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...4.3 Medium
- axis communications ab p1428-e network camera, q6128-e ptz network camera +1 moreFlorent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet...7.5 High
- axis communications ab camera station, camera station pro +1 moreSeth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to...4.4 Medium
- axis communications ab camera station, camera station pro +1 moreSeth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident...6.3 Medium
- axis communications ab camera station, camera station pro +1 moreGee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is...4.2 Medium
- tychesoftwares product input fields for woocommerceProduct Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- pluginus inpost galleryInPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template6.3 Medium
- unknown everest formsEverest Forms < 3.0.4.2 - Admin+ Stored XSS4.8 Medium
- cleantalk anti-spam, antispam, spam protection, honeypot, anti-spam by cleantalk +2 moreSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation9.8 Critical
- cleantalk antispam, spam protection, honeypot, anti-spam by cleantalk, spam protection\, antispam\, firewall +2 moreSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation8.1 High
- cleantalk antispam, login security, firewall, malware removal by cleantalk +1 moreSecurity & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection7.5 High
- gqevu6bsiz wp admin ui customizeCross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14....4.8 Medium
- anton bond additional order filters for woocommerceAdditional Order Filters for WooCommerce <= 1.21 - Reflected Cross-Site Scripting6.1 Medium
- sanskritforum skt nurcaptchaSkt NURCaptcha <= 3.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- ibm watson speech services cartridge for ibm cloud pak for data, watson assistant for ibm cloud pak for data, watson speech services cartridge on cloud pak for data +2 moreIBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service7.5 High
- Show moreLoading…