CVEs published in November 2022

3,183 vulnerabilities, 267 critical, 13 exploited.

• digital alert systems dasdec, digitalalertsystems dasdec i firmware, dasdec ii firmware +3 more +5 more A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert... CVE-2022-40204 4.1 MediumNovember 30, 2022
• digital alert systems dasdec, digitalalertsystems dasdec i firmware, dasdec ii firmware +3 more +5 more Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS)... CVE-2019-18265 4.7 MediumNovember 30, 2022
• hcl software sametime HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access CVE-2022-42446 6.5 MediumNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote... CVE-2022-44533 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command... CVE-2022-44532 4.9 MediumNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-43542 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-43541 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web... CVE-2022-43518 4.9 MediumNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a... CVE-2022-37926 5.5 MediumNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could... CVE-2022-37925 6.1 MediumNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-37924 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-37923 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-37922 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-37921 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote... CVE-2022-37920 7.2 HighNovember 30, 2022
• arubanetworks edgeconnect enterprise, hewlett packard enterprise (hpe) aruba edgeconnect enterprise software +1 more A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker... CVE-2022-37919 7.5 HighNovember 30, 2022
• hewlett packard enterprise (hpe) packard enterprise officeconnect 1820, 1850, and 1920s network switches, hpe officeconnect 1820 j9979a firmware, officeconnect 1820 j9980a firmware +17 more +19 more A potential security vulnerability has been identified in Hewlett Packard Enterprise... CVE-2022-37932 Public exploit 8.8 HighNovember 30, 2022
• drupal/socialbase Packagist The Social Base theme is designed as a base theme for Open Social. This base theme holds has a lot of sensible defaults. It doesn't however contain much styling. We expect developers to want to change… DRUPAL-CONTRIB-2022-060 Fix available No scoreNovember 30, 2022
• m-files server Information disclosure in M-Files Server CVE-2022-1911 5.3 MediumNovember 30, 2022
• m-files server Incorrect privilege assignment in M-Files Server CVE-2022-1606 2.4 LowNovember 30, 2022
• ghostscript OSS-Fuzz Heap-use-after-free in gs_font_finalize OSV-2022-1225 Fix available No scoreNovember 30, 2022
• technowich wp ulike, wp ulike (wordpress plugin) +1 more WordPress WP ULike Plugin <= 4.6.4 is vulnerable to Race Condition vulnerability CVE-2022-45842 5.3 MediumNovember 30, 2022
• adrotate banner manager project banner manager, arnan de gans adrotate banner manager (wordpress plugin) +1 more WordPress AdRotate Banner Manager Plugin <= 5.9 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-26366 5.4 MediumNovember 30, 2022
• parity-util-mem crates.io parity-util-mem Unmaintained RUSTSEC-2022-0080 No scoreNovember 30, 2022
• secp256k1 crates.io Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code GHSA-969w-q74q-9j8v Fix available No scoreNovember 30, 2022
• hyper-staticfile crates.io hyper-staticfile's improper validation of Windows paths could lead to directory traversal attack GHSA-7p7c-pvvx-2vx3 Fix available No scoreNovember 30, 2022
• trellix agent An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions... CVE-2022-3859 6.7 MediumNovember 30, 2022
• mitsubishi electric corporation melsec iq-r series r04/08/16/32/120encpu, melsec iq-r series rj71en71, mitsubishielectric rj71en71 firmware +5 more +7 more Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module CVE-2022-40265 8.6 HighNovember 30, 2022
• g810-led project g810-led, debian linux +1 more g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to... CVE-2022-46338 Fix available 6.5 MediumNovember 30, 2022
• discourse discourse-bbcode, bbcode +1 more Discourse BBCode plugin vulnerable to arbitrary CSS injection CVE-2022-46162 8.8 HighNovember 30, 2022
• grafana synthetic-monitoring-agent, synthetic monitoring agent +1 more Grafana's default installation of `synthetic-monitoring-agent` exposes sensitive information CVE-2022-46156 Fix available 7.2 HighNovember 30, 2022
• capnproto capnp, capnproto, fedoraproject fedora +2 more Cap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list. CVE-2022-46149 Fix available 5.4 MediumNovember 30, 2022
• linux kernel A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS... CVE-2022-45869 Fix available 5.5 MediumNovember 30, 2022
• tenda tx9 pro firmware Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at ... CVE-2022-45337 7.5 HighNovember 30, 2022
• gnu libredwg LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function... CVE-2022-45332 7.8 HighNovember 30, 2022
• church management system project management system Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id... CVE-2022-45328 7.2 HighNovember 30, 2022
• sanitization management system project management system Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes... CVE-2022-44296 7.2 HighNovember 30, 2022
• sanitization management system project management system Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders... CVE-2022-44295 7.2 HighNovember 30, 2022
• sanitization management system project management system Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page... CVE-2022-44294 7.2 HighNovember 30, 2022
• sanitization management system project management system Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php. CVE-2022-44151 9.8 CriticalNovember 30, 2022
• tribalsystems zenario Zenario CMS is vulnerable to Remote Code Execution (RCE). CVE-2022-44136 Public exploitFix available 9.8 CriticalNovember 30, 2022
• book store management system project store management system Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows... CVE-2022-44097 9.8 CriticalNovember 30, 2022
• sanitization management system project management system Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows... CVE-2022-44096 9.8 CriticalNovember 30, 2022
• canteen management system project management system, sourcecodester canteen management system +1 more SourceCodester Canteen Management System brand.php builtin_echo cross site scripting CVE-2022-4234 3.5 LowNovember 30, 2022
• rinvizle event registration system SourceCodester Event Registration System cross site scripting CVE-2022-4233 2.4 LowNovember 30, 2022
• rinvizle event registration system SourceCodester Event Registration System unrestricted upload CVE-2022-4232 4.7 MediumNovember 30, 2022
• tribal systems zenario cms, tribalsystems zenario +1 more Tribal Systems Zenario CMS Remember Me session fixiation CVE-2022-4231 4.2 MediumNovember 30, 2022
• book store management system project store management system, sourcecodester book store management system +1 more SourceCodester Book Store Management System index.php access control CVE-2022-4229 7.3 HighNovember 30, 2022
• book store management system project store management system, sourcecodester book store management system +1 more SourceCodester Book Store Management System information disclosure CVE-2022-4228 5.3 MediumNovember 30, 2022
• canteen management system project management system, sourcecodester canteen management system +1 more SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection CVE-2022-4222 5.0 MediumNovember 30, 2022
• Show olderLoading…