CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- agenteasy properties project properties, agenteasy properties (wordpress plugin) +1 moreWordPress AgentEasy Properties plugin <= 1.0.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- silabs micrium uc-http, silabs.com gecko platform +1 moreHeap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution9.1 Critical
- trihedral vtscadaAn Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior....7.5 High
@apollo/servernpm,apollo-server-corenpm +1 moreBatched HTTP requests may set incorrect `cache-control` response headerNo scoreckbcrates.iockb type_id script resume may randomly failNo scoreckbcrates.iockb: Transaction header_deps validation issue (network forking)No scoreckbcrates.iockb: Large dep group requires a lot of resources to process but the cost to commit the transaction is very low.No scorecryptographyPyPIVulnerable OpenSSL included in cryptography wheelsNo score- silabs gecko bootloaderGecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices8.3 High
- frauscher sensortechnik diagnostic system fds102, frauscher diagnostic system 102 +1 moreFrauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability9.8 Critical
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho +1 morePentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.7.1 High
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text7.7 High
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - Exposure of Information Through Directory Listing5.0 Medium
librawspeedOSS-FuzzHeap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpcNo scoretomcatOSS-FuzzSecurity exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatStringNo score- sudo project sudoSudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth...7.1 High
- apache airflowApache Airflow prior to 2.4.2 has an open redirect6.1 Medium
- apache airflowApache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL6.1 Medium
- apache sling cms, apache software foundation sling app cms +1 moreXSS in Sling CMS Reference App Taxonomy Path5.4 Medium
- gpacGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component...5.5 Medium
- gpacGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component...5.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via...6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...6.5 Medium
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...8.8 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- python, fedoraproject fedora +1 morePython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 High
- fortinet fortisoarA missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4...5.3 Medium
- garage management system project management systemGarage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- ndk-design ndkadvancedcustomizationfieldsndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via...6.1 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] exists in...8.0 High
- fortinet fortiedrAn improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR...4.4 Medium
- fortinet fortimailAn improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4...5.4 Medium
- pdfhummus hummusjs, julianhille muhammarajs +1 moreUnchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp7.5 High
- fluent fluentd, fedoraproject fedora +1 moreFluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)3.1 Low
- Show moreLoading…