CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- discourseDisplaying user badges can leak topic titles to users that have no access to the topic5.3 Medium
- discourseDiscourse user account takeover via email and invite link8.9 High
- discoursePossible Server-Side Request Forgery (SSRF) in webhooks7.6 High
- phpipamphpipam Import Preview import-load-data.php cross site scripting2.4 Low
- webminWebmin index.cgi cross site scripting3.5 Low
- fortinet fortiadcAn improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all...5.3 Medium
- fortinet fortiosAn improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0...4.3 Medium
- fortinet fortiadcA improper neutralization of input during web page generation ('cross-site scripting') in...8.8 High
- fortinet fortideceptorAn improper neutralization of input during web page generation vulnerability [CWE-79] in...8.0 High
- fortinet fortitesterA hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0...6.7 Medium
- centreoncentreon Contact Groups Form formContactGroup.php sql injection6.3 Medium
- aureus erp, huaxiaerp huaxia erp +1 moreHuaxia ERP Retail Management list information disclosure4.3 Medium
- aureus erp, huaxiaerp huaxia erp +1 moreHuaxia ERP User Management sql injection6.3 Medium
- fortinet fortiadcAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC...8.0 High
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS...3.7 Low
- fortinet forticlient, forticlientmac +1 moreAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in...2.2 Low
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...7.8 High
- fortinet fortiosA key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0...3.9 Low
- gitlabA cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting...7.3 High
- fortinet fortimail, fortios, antivirus engine +1 more +3 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient,...4.7 Medium
- fortinet fortisiemA improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local...7.8 High
- stb project stb, debian linux +1 morestb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information...8.1 High
- tribal systems zenario cms, tribalsystems zenario +1 moreTribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting3.5 Low
- go standard library os/exec, syscall, golang go +2 moreUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 High
phpMageiaUpdated php packages fix security vulnerabilityNo score- devolutions server, remote desktop manager +1 moreDashlane password and Keepass Server password in My Account Settings are not encrypted in the...6.5 Medium
- devolutions remote desktop managerDatabase connections on deleted users could stay active on MySQL data sources in Remote Desktop...7.5 High
- google protobuf-java, protobuf-javalite, protocolbuffers +2 moreParsing issue in protobuf textformat7.5 High
- hcl software verse for android, hcltech verse +1 moreHCL Verse for Android is susceptible to an APK signing key check vulnerability5.9 Medium
- xmldom, debian linux +1 morexmldom allows multiple root nodes in a DOM9.4 Critical
- bitdefender enginesImproper handling of registry symbolic links in Bitdefender Engines8.6 High
- muhammara project muhammaraDenial of Service (DoS)7.5 High
- hitachi infrastructure analytics advisor, ops center analyzer +1 moreInformation Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer6.5 Medium
- hitachi infrastructure analytics advisor, ops center analyzer, ops center viewpoint +2 moreServer-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer9.8 Critical
- hitachi ops center analyzerInformation Exposure Vulnerability in Hitachi Ops Center Analyzer6.6 Medium
- hitachi infrastructure analytics advisor, ops center analyzer, ops center viewpoint +2 moreFile Permissions Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Viewpoint6.6 Medium
ffmpegDebianffmpeg - security updateNo score- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn camera driver, there is a possible out of bounds write due to a incorrect bounds check. This...4.4 Medium
- lesspipe project lesspipelesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of...9.8 Critical
- sick sim1012-0p0g200 firmwarePassword recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version < 2.2.0...7.3 High
- sick sim2000-2p04g10 firmware, sim2500-2p03g10 firmware +1 morePassword recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with...7.3 High
- slims senayan library management systemSenayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability...7.2 High
- slims senayan library management systemSenayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- Show moreLoading…