CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- suse hackweekMissing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers...5.7 Medium
- wphostingdev login with vipps and mobilepayLogin with Vipps and MobilePay <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- iseard kudos donations, iseardmedia kudos donations: easy donations with mollie | one-off & recurring | pdf invoices | buttons & forms +1 moreKudos Donations – Easy donations and payments with Mollie <= 3.2.9 - Reflected Cross-Site Scripting6.1 Medium
- iseard kudos donations, iseardmedia kudos donations: easy donations with mollie | one-off & recurring | pdf invoices | buttons & forms +1 moreKudos Donations – Easy donations and payments with Mollie <= 3.2.9 - Reflected Cross-Site Scripting via 'add_query_arg'6.1 Medium
- ays pro faq builder aysFAQ Builder AYS <= 1.7.1 - Reflected Cross-Site Scripting6.1 Medium
- intellasoftsolutions seo landing page generatorSEO Landing Page Generator <= 1.66.2 - Reflected Cross-Site Scripting6.1 Medium
- ninjateam file manager pro – filester, filester, filemanager pro-filester +2 moreFile Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion7.2 High
- r00tsector hls playerHLS Player <= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ninjateam file manager pro – filester, filester, filemanager pro-filester +2 moreFile Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- ragicsupport ragic shortcodeRagic Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- streamweasels youtube integrationStreamWeasels YouTube Integration <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-S…6.4 Medium
- legalweb cloudLegalWeb Cloud <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
hplipopenSUSESecurity update for hplipNo score- zabbixUnauthenticated Zabbix frontend takeover when SSO is being used8.8 High
- eyecix jobsearch wp job boardWP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation9.8 Critical
- logichunt logo slider, logo slider wordpress slider wordpress +1 moreLogo Slider < 4.5.0 - Contributor+ Stored XSS5.4 Medium
- unknown adbuddy+ (adblocker detection) by netfunkdesign, adbuddy plus wordpress plus wordpress, netfunkdesign adbuddy\+ \(adblocker detection\) +2 moreadBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Admin+ Stored XSS4.8 Medium
- bdthemes element pack elementor addons (header footer, template library, dynamic grid & carousel, remote arrows), element pack, element pack elementor addons wordpress pack elementor addons wordpress +2 moreElement Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS5.4 Medium
- logichunt logo slider, logo slider wordpress slider wordpress +1 moreLogo Slider < 4.5.0 - Author+ Stored XSS5.4 Medium
- rswebstudios image alt textImage Alt Text <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Image Alt Text Update4.3 Medium
- vivo game extension engineGame Extension Engine Path Traversal Vulnerability2.4 Low
- fuji electric co., ltd. and hakko electronics co., ltd. v-server, v-server lite +1 moreThere is an Out-of-bounds read vulnerability in V-Server (v4.0.19.0 and earlier) and V-Server...7.8 High
- fuji electric tellus, fuji electric co., ltd. and hakko electronics co., ltd. tellus lite +1 moreThere is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite ...7.8 High
- fuji electric tellus, fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fuji electric co., ltd. and hakko electronics co., ltd. tellus lite +2 moreThere are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier),...7.8 High
- google androidIn BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information...5.5 Medium
tzdataDebiantzdata - new timezone databaseNo score- haproxy, haproxy project 2.6, 2.8 +2 more +4 moreInconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in...5.3 Medium
- google android, pixel +1 moreIn installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This...7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric tellus lite, fujielectric tellus lite v-simulator +1 moreFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric tellus lite, fujielectric tellus lite v-simulator +1 moreFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric tellus lite, fujielectric tellus lite v-simulator +1 moreFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric tellus lite, fujielectric tellus lite v-simulator +1 moreFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric tellus lite, fujielectric tellus lite v-simulator +1 moreFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- google androidIn VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of...6.5 Medium
- google androidIn ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound...6.5 Medium
- google androidIn ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to...6.5 Medium
- google androidIn ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due...6.5 Medium
- Show moreLoading…