CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- gnu emacsIn elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at...7.8 High
- phpgurukul covid19 testing management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search...4.8 Medium
- phpgurukul covid19 testing management systemA SQL Injection vulnerability was found in /covid-tms/check_availability.php in PHPGurukul COVID...9.8 Critical
- phpgurukul covid19 testing management systemA SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID...7.3 High
- omada identityStored Cross-Site Scripting in the Access Request History in Omada Identity before version 15...8.0 High
- totolink a3002ru firmware, n150rt firmware, n300rt firmware +1 more +3 moreAn issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121...6.8 Medium
- davidguva openvidreviewOpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in review names.4.8 Medium
- davidguva openvidreviewOpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible...9.8 Critical
- No product listedQuectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.4.2 Medium
- engenius ews356 fit firmware, engeniustech ews356-fir firmware +1 moreEnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS...8.0 High
- editorconfig, editorconfig editorconfig-core-c +1 moreSeveral stack buffer overflows and pointer overflows in editorconfig-core-c4.8 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA forgot_password_process.php sql injection6.9 Medium
- phpgurukul user registration & login and user management system, user registration \& login and user management system, user registration and login and user management system +2 morePHPGurukul User Registration & Login and User Management System signup.php sql injection6.9 Medium
- phpgurukul user registration & login and user management system, user registration \& login and user management system, user registration and login and user management system +2 morePHPGurukul User Registration & Login and User Management System index.php sql injection6.9 Medium
- hewlett packard enterprise (hpe) hpe insight remote support, hpe insight remote support +1 moreAn XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow...7.3 High
- hewlett packard enterprise (hpe) hpe insight remote support, hpe insight remote support +1 moreAn XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow...7.3 High
- hewlett packard enterprise insight remote supportA java deserialization vulnerability in HPE Remote Insight Support allows an unauthenticated...8.1 High
- hewlett packard enterprise (hpe) hpe insight remote support, hpe insight remote support +1 moreAn XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow...7.3 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 SetStaticRouteCfg route_static_check stack-based overflow8.7 High
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA register.php sql injection6.9 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery6.9 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System ajax.php cross site scripting5.3 Medium
- treeverse lakefsRe-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to it's deletion5.7 Medium
- microsoft dynamics 365 sales, dynamics 365 sales for android, dynamics 365 sales for ios +2 moreMicrosoft Dynamics 365 Sales Spoofing Vulnerability7.6 High
- microsoft azure functionsMicrosoft Azure PolicyWatch Elevation of Privilege Vulnerability8.2 High
- microsoft copilot studioMicrosoft Copilot Studio Elevation Of Privilege Vulnerability9.3 Critical
- microsoft partner centerPartner.Microsoft.Com Elevation of Privilege Vulnerability8.7 High
- opentext™ accurev, opentext accurev for ldap integration +1 moreMissing Authentication for Critical Function vulnerability in OpenText™ AccuRev for LDAP...9.0 Critical
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab5.3 Medium
- valor apps easy folder listing proEasy Folder Listing Pro deserialization vulnerability9.3 Critical
- red hat enterprise linux 8, enterprise linux 9, openshift container platform 3.11 +5 more +7 moreCri-o: checkpoint restore can be triggered from different namespaces7.4 High
- gitlabInefficient Algorithmic Complexity in GitLab4.3 Medium
- gitlabIncorrect Authorization in GitLab6.5 Medium
- labsai eddiImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in labsai/eddi6.3 Medium
- gitlabMissing Authorization in GitLab8.2 High
- gitlabInefficient Algorithmic Complexity in GitLab5.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLab6.5 Medium
- gitlabInsufficient Session Expiration in GitLab4.2 Medium
- wpbeginner sugar calendar, smub sugar calendar – events calendar, event tickets, and events management platform +1 moreSugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting6.1 Medium
- grpc, grpc grpc-c++ +1 moreDenial of Service through Data corruption in gRPC-C++6.9 Medium
- sigstore sigstore-javaVulnerability with bundle verification in sigstore-java5.5 Medium
- ethyca fidesPassword Policy Bypass Vulnerability in Fides Webserver2.0 Low
- lobehub lobe-chat, lobe chat +1 moressrf vulnerability in lobe-chat8.1 High
- boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 moreTotal Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings7.2 High
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 moreBuffer Over-read in IPA8.4 High
- qualcomm 9206 lte modem firmware, apq8016 firmware, apq8017 firmware +12 more +14 moreUse After Free in Video7.8 High
- qualcomm sd 450 firmware, sd 625 firmware, sd 820 firmware +5 more +7 moreInformation Exposure in Kernel8.4 High
- qualcomm sd 450 firmware, sd 625 firmware, sd 820 firmware +5 more +7 moreInformation Exposure in Camera Driver8.4 High
- qualcomm 9206 lte modem firmware, apq8037 firmware, sd626 firmware +3 more +5 moreImproper Access Control in Core.7.8 High
- Show moreLoading…