CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreThis vulnerability allows local attackers to disclose sensitive information on affected...5.1 Medium
c-blosc2OSS-FuzzHeap-buffer-overflow in ndlz8_decompressNo scorejaninoOSS-FuzzSecurity exception in org.codehaus.janino.Parser.parseAssignmentExpressionNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in add_compile_stringNo scoreghostscriptOSS-FuzzHeap-use-after-free in gs_font_finalizeNo scoreffmpegDebianffmpeg - security updateNo score- stiltsoft handy macros for confluenceThe Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5...8.9 High
- linux kernel, netapp active iq unified manager, h300s firmware +5 more +7 moreThe Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer...7.5 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’)...7.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...7.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the...7.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local...7.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...7.0 High
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows...7.0 High
- xwiki openid connect, xwiki-contrib oidc +1 moreXWiki OIDC Authenticator vulnerable to OpenID login bypass due to improper authentication9.1 Critical
- azure-rtos usbx, microsoft azure rtos usbx +1 moreAzure RTOS USBX vulnerable to buffer overflow9.8 Critical
- watchdog anti-virusIncorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows...6.5 Medium
- froxlor, froxlor froxlor/froxlor +1 moreCode Injection in froxlor/froxlor7.6 High
- apache pulsarApache Pulsar C++/Python OAuth Clients prior to 3.0.0 were vulnerable to an MITM attack due to Disabled Certificate Validation8.1 High
- trellix ips manager, intrusion prevention system manager +1 moreTrellix IPS Manager vulnerable to XXE5.9 Medium
- vmware bosh editor, cloudfoundry manifest yml support, concourse ci pipeline editor +2 more +4 moreSpring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring...9.8 Critical
- pingcap pingcap/tidb, tidb +1 moreUse of Externally-Controlled Format String in pingcap/tidb4.2 Medium
- hotelmanager project hotelmanagerSaibamen HotelManager v1.2 is vulnerable to Cross Site Scripting (XSS) due to improper...5.4 Medium
- diplibdiplib Double Free6.5 Medium
- jhead project jhead, debian linux +1 morejhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.7.8 High
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution through dashboard PDF generation component in Splunk Enterprise8.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise6.4 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could...3.8 Low
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreDue to improper restrictions on XML entities multiple vulnerabilities exist in the command line...3.8 Low
- keywordrush content egg, content egg (wordpress plugin) +1 moreWordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreA buffer overflow vulnerability exists in the ArubaOS command line interface. Successful...4.4 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities2.7 Low
- jumpdemand 4ecps web forms, jumpdemand inc. 4ecps web forms (wordpress plugin) +1 moreWordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.9 Medium
- cisco secure email, secure email and web manager, email security appliance firmware +1 more +3 moreA vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager...4.7 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...5.4 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAruba has identified certain configurations of ArubaOS that can lead to sensitive information...5.3 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE...5.3 Medium
- cisco umbrella dashboard, umbrella +1 moreA vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an...4.8 Medium
- coleds simple seo, david cole simple seo (wordpress plugin) +1 moreWordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- cisco secure email, secure email and web manager, secure web appliance +1 more +3 moreA vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA),...6.5 Medium
- cisco email security appliance, secure email +1 moreA vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an...7.5 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series...5.8 Medium
- cisco secure email, secure email and web manager, secure web appliance +1 more +3 moreA vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco...4.7 Medium
- cisco secure email, secure email and web manager, asyncos +2 moreA vulnerability in web-based management interface of the of Cisco Email Security Appliance and...5.4 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...7.1 High
- coleds simple seo, david cole simple seo (wordpress plugin) +1 moreWordPress Simple SEO plugin <= 1.8.12 - Broken Access Control vulnerability5.4 Medium
- cisco broadworks commpilot application, broadworks +1 moreA vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application...8.3 High
- cisco broadworks, broadworks messaging server +1 moreA vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application...7.7 High
- a3rev page view count, a3rev software page view count (wordpress plugin) +1 moreWordPress Page View Count plugin <= 2.5.5 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreA vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a...5.8 Medium
- Show moreLoading…