CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- mozilla firefox, firefox for ios +1 moreUnder certain circumstances, navigating to a webpage would result in the address missing from the...5.4 Medium
- mozilla firefox, firefox for ios +1 moreAccessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in...5.4 Medium
- mozilla firefox, thunderbird +1 moreMissing thread synchronization primitives could have led to a data race on members of the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 High
- mozilla firefox, thunderbird +1 moreA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the...6.5 Medium
- mozilla firefox, thunderbird +1 more`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was...9.1 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA flaw in handling fullscreen transitions may have inadvertently caused the application to become...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Medium
- mozilla firefoxOn Android, Firefox may have inadvertently allowed viewing saved passwords without the required...5.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Medium
- mozilla firefox, thunderbird +1 moreCopying sensitive information from Private Browsing tabs on Android, such as passwords, may have...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 Critical
- mozilla firefox, thunderbird +1 moreThe incorrect domain may have been displayed in the address bar during an interrupted navigation...4.3 Medium
- mozilla firefox, thunderbird +1 moreMalicious websites may have been able to user intent confirmation through tapjacking. This could...8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be...8.8 High
- hitachi energy nsd570 teleprotection equipmentA vulnerability exists in NSD570 that allows any authenticated user to access all device logs...4.3 Medium
- hitachi energy nsd570 teleprotection equipment, hitachienergy nsd570 firmware +1 moreA vulnerability exists in NSD570 login panel that does not restrict excessive authentication...5.3 Medium
- vmware aria operations, cloud foundation +1 moreStored cross-site scripting vulnerability (CVE-2024-38834)6.5 Medium
- vmware aria operations, cloud foundation +1 moreStored cross-site scripting vulnerability (CVE-2024-38833)6.8 Medium
- vmware aria operations, cloud foundation +1 moreStored cross-site scripting vulnerability (CVE-2024-38832)7.1 High
- vmware aria operations, cloud foundation +1 moreLocal privilege escalation vulnerability (CVE-2024-38831)7.8 High
- vmware aria operations, cloud foundation +1 moreLocal privilege escalation vulnerability7.8 High
- apache nimbleApache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler7.5 High
- apache nimbleApache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access5.0 Medium
- apache nimbleApache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler5.0 Medium
- apache nimbleApache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack6.3 Medium
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form Exposure4.3 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template4.3 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget6.4 Medium
- apppresser, scottopolis apppresser – mobile app framework +1 moreAppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices...6.5 Medium
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"...7.3 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following...9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...9.8 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.2 High
- Show moreLoading…