CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- addify role based pricing for woocommerceRole Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization8.8 High
- really-simple-plugins complianz, unknown complianz premium, complianz – gdpr/ccpa cookie consent +1 more +3 moreComplianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi8.8 High
- weberge wp hide, unknown wp-hide +1 moreWP Hide <= 0.0.2 - Unauthenticated Settings Update5.3 Medium
- opmc woocommerce dropshippingWooCommerce Dropshipping < 4.4 - Unauthenticated SQLi9.8 Critical
- fluentforms contact form, contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, unknown contact form plugin – fastest contact form builder plugin for wordpress by fluent forms +2 moreFluentForm < 4.3.13 - CSV Injection9.8 Critical
- highlight focus project focus, unknown highlight focus +1 moreHighlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting4.8 Medium
- addify product stock managerProduct Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls4.3 Medium
- soflyy wp all import, unknown import any xml or csv file to wordpress +1 moreWP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE7.2 High
- soflyy wp all import, unknown import any xml or csv file to wordpress +1 moreWP All Import < 3.6.9 - Admin+ Directory traversal via file upload7.2 High
- awesomemotive easy digital downloads, unknown easy digital downloads – simple ecommerce for selling digital files +1 moreEasy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF4.3 Medium
- lenovo elan miniport touchpad driverELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple...4.7 Medium
mongooseOSS-FuzzHeap-buffer-overflow in mg_mqtt_parseNo scorequickjsOSS-FuzzHeap-buffer-overflow in js_free_function_defNo scoreonigurumaOSS-FuzzHeap-buffer-overflow in gbNUMBER_mbc_enc_lenNo scoreghostscriptOSS-FuzzStack-buffer-underflow in gs_type2_interpretNo scoreonigurumaOSS-FuzzHeap-buffer-overflow in gbNUMBER_mbc_enc_lenNo scoreonigurumaOSS-FuzzHeap-buffer-overflow in onigenc_mbn_mbc_case_foldNo scoreghostscriptOSS-FuzzUNKNOWN READ in Ins_MSIRPNo scoreonigurumaOSS-FuzzHeap-buffer-overflow in onigenc_unicode_mbc_case_foldNo scorekimageformatsOSS-FuzzHeap-buffer-overflow in LibRaw::phase_one_correctNo score- maharaMahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0...9.8 Critical
- wolfsslIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then...9.1 Critical
- maharaIn Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22...7.5 High
- pattersondental eaglesoftPatterson Dental Eaglesoft 21 has AES-256 encryption but there are two ways to obtain a keyfile: ...7.8 High
- bytecodealliance wasmtimeWasmtime vulnerable to data leakage between instances in the pooling allocator8.6 High
- bytecodealliance wasmtimeWasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration5.9 Medium
radare2OSS-FuzzHeap-buffer-overflow in io_memory_readNo scoremongooseOSS-FuzzHeap-buffer-overflow in rx_ipNo score- froxlor, froxlor froxlor/froxlor +1 moreCode Injection in froxlor/froxlor6.5 Medium
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System sql injection4.7 Medium
- splunk, splunk enterprise, cloud platform +2 moreIndexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise7.5 High
- splunk, splunk enterprise, cloud platform +2 moreXML External Entity Injection through a custom View in Splunk Enterprise8.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise8.0 High
- splunk, splunk enterprise, cloud platform +2 moreReflected Cross-Site Scripting via the radio template in Splunk Enterprise8.8 High
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature8.8 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise7.3 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise8.1 High
- splunk, splunk enterprise, cloud platform +2 moreDenial of Service in Splunk Enterprise through search macros4.9 Medium
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via rex search command field names in Splunk Enterprise8.1 High
- splunk, splunk enterprise, cloud platform +2 moreHost Header Injection in Splunk Enterprise3.0 Low
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability8.6 High
- hcl software workload automation, hcltechsw hcl workload automation +1 moreHCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager6.2 Medium
- hcl dominoHCL Domino is susceptible to an information disclosure vulnerability5.5 Medium
- hcl dominoHCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability8.3 High
- becton dickson (bd) bd totalys multiprocessor, bd totalys multiprocessor firmware +1 moreBD Totalys MultiProcessor - Hardcoded Credentials6.6 Medium
- palantir foundry blobster service, foundry blobster +1 moreThe Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.4.8 Medium
- osisoft-pi-web-connector project osisoft-pi-web-connector, palantir foundry magritte plugin osisoft-pi-web-connector +1 moreThe Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.4.2 Medium
- suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 moreSUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6 Low
- suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 moreSUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3 Medium
- suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 moreSUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3 Medium
- Show moreLoading…