CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- rockcontent rock convert, stage rock convert (wordpress plugin) +1 moreWordPress Rock Convert plugin <= 2.11.0 - Auth. Cross-Site Scripting (XSS) vulnerability4.8 Medium
- netskope, netskope nsclient +1 moreSensitive Information store in NSClient logs8.4 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn authenticated path traversal vulnerability exists in the ArubaOS command line interface....6.5 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreVulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to...6.6 Medium
- openharmonyAn abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.6.5 Medium
- openharmonyArbitrary file read via download_server.6.2 Medium
- openharmonyMultiple path traversal in appspawn and nwebspawn services.8.4 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreVulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to...6.6 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreA vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with...7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...8.8 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a command injection vulnerability that could lead to unauthenticated remote code...9.8 Critical
- in2code femanagerTYPO3 Extension femanager vulnerable to Broken Access Control5.3 Medium
- hypr workforce accessIncorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on...3.7 Low
- fedora project coreos, redhat fedora coreos +1 moreFedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this...2.6 Low
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- innate-images-llc vr calendar, vr calendar project calendar +1 moreVR Calendar <= 2.3.3 - Cross-Site Request Forgery8.8 High
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- gloriafood restaurant menu – food ordering system – table reservation, oracle restaurant menu - food ordering system - table reservation +1 moreRestaurant Menu – Food Ordering System – Table Reservation <= 2.3.1 - Cross-Site Request Forgery8.8 High
- gloriafood restaurant menu – food ordering system – table reservation, oracle restaurant menu - food ordering system - table reservation +1 moreRestaurant Menu – Food Ordering System – Table Reservation <= 2.3.0 - Missing Authorization on AJAX Actions6.3 Medium
- hpe integrated lights-out 5, hewlett packard enterprise (hpe) hpe integrated lights-out 5, hp integrated lights-out 5 firmware +2 moreCross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.6.4 Medium
- hewlett packard enterprise (hpe) hpe nimble storage hybrid flash arrays; nimble storage secondary flash arrays, hpe hf20 firmware, hf20c firmware +7 more +9 moreInsufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE...8.0 High
- hewlett packard enterprise (hpe) hpe nimble storage hybrid flash arrays; nimble storage secondary flash arrays, hpe hf20 firmware, hf20c firmware +7 more +9 moreA security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE...6.7 Medium
- hewlett packard enterprise (hpe) hpe nimble storage hybrid flash arrays; nimble storage secondary flash arrays, hpe hf20 firmware, hf20c firmware +7 more +9 moreImproper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid...6.7 Medium
- hewlett packard enterprise (hpe) hpe oneview global dashboard (ovgd), hpe oneview global dashboard +1 moreURL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise...6.1 Medium
assimpOSS-FuzzUNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValueNo score- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's...2.2 Low
- pixman, debian linux, fedoraproject fedora +2 moreIn libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer...8.8 High
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token...2.7 Low
- ibm robotic process automation, robotic process automation for cloud pak +1 more"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to...7.5 High
- emlogEmlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...4.8 Medium
- dlink dir-823g firmwareD-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter...9.8 Critical
- tenda ac23 firmwareTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter...9.8 Critical
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online tours \& travels management system project tours \& travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload...7.2 High
- Show moreLoading…