CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- ffmpegFFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec...9.8 Critical
- ffmpegFFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8...9.1 Critical
- iconics genesis64, mitsubishi electric corporation genesis32, hyper historian +2 more +4 moreMalicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS327.8 High
- iconics genesis64, mitsubishi electric corporation iconics suite +1 moreMalicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite7.0 High
- iconics genesis64, mitsubishi electric corporation genesis32, hyper historian +2 more +4 moreMalicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS327.8 High
- guizhou xiaoma technology jpressGuizhou Xiaoma Technology jpress Avatar upload cross site scripting5.3 Medium
- anisha concert ticket ordering systemcode-projects Concert Ticket Ordering System tour(cor).php sql injection6.9 Medium
- anisha farmaciacode-projects Farmacia pagamento.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management system reset-password.php sql injection6.9 Medium
seamonkeyopenSUSESecurity update for seamonkeyNo score- phpgurukul complaint management systemPHPGurukul Complaint Management system index.php sql injection6.9 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management system reset-password.php sql injection6.9 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management system index.php sql injection6.9 Medium
- apache arrow, apache software foundation arrow r package +1 moreApache Arrow R package: Arbitrary code execution when loading a malicious data file9.8 Critical
- cradlepoint netcloud exchange client, netcloud exhange client +1 moreIncorrect default permissions in Cradlepoint NetCloud Exchange8.8 High
- code-projects responsive hotel sitecode-projects Responsive Hotel Site room.php sql injection5.3 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System login.php sql injection6.9 Medium
- linux, linux kernel +1 morecan: bcm: Fix UAF in bcm_proc_show()7.8 High
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosure6.9 Medium
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetPortTr buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formResetStatistic buffer overflow8.7 High
- subratamal wallet for woocommerce, standalonetech terawallet +1 moreWallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types6.5 Medium
ruzstdcrates.io`ruzstd` uninit and out-of-bounds memory readsNo score- ambitioncloud fintelligence calculator, fintelligence calculator +1 moreWordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp wox footer flyout widgetWordPress Footer Flyout Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- harshtohit111 fence urlWordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability7.1 High
- idealien studios category enhancements, jamie o idealien category enhancements +1 moreWordPress Idealien Category Enhancements plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- jason grim custom shortcode sidebarsWordPress Custom Shortcode Sidebars plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- kubiq block editor bootstrap blocksWordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- llc «triincom» express payments moduleWordPress Express Payments plugin <= 1.1.8 - SQL Injection vulnerability9.3 Critical
- enituretechnology distance based shipping calculatorWordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability8.5 High
- pathomationWordPress Pathomation plugin <= 2.5.1 - Arbitrary File Upload vulnerability10.0 Critical
- abosoluteplugins absolute addons for elementorWordPress Absolute Addons For Elementor plugin <= 1.0.14 - Local File Inclusion vulnerability7.5 High
- quomodosoft shopreadyWordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerability7.5 High
- softpulse infotech sp blog designerWordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- ibrahim pricing table addon for elementorWordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- webbytemplate office locatorWordPress Office Locator plugin <= 1.3.0 - Local File Inclusion vulnerability7.5 High
- astoundify jobify, jobify job board wordpress theme +1 moreWordPress Jobify theme < 4.3.0 - Unauthenticated Arbitrary File Read vulnerability7.5 High
- rank math seo math seoWordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability7.2 High
- 101gen wawpWordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability9.8 Critical
- siempelkamp umweltofficeSiempelkamp: SQL injection due to improper handling of HTTP request input data6.5 Medium
- tumult hype animations, tumultinc tumult hype animations +1 moreTumult Hype Animations <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function9.9 Critical
- nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 moreRestaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- marketingfire widget options – advanced conditional visibility for gutenberg blocks & classic widgets, widget-options +1 moreWidget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution9.9 Critical
- nicheaddons primary addon for elementorPrimary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- contest-gallery contest gallery, contest gallery gallery, contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe +2 moreContest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover9.8 Critical
- mattermost, mattermost server +1 moreDomain Restriction Bypass on Registration8.2 High
- suse opensuse factoryDoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge6.8 Medium
- Show moreLoading…