CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- acronis cyber protect home officeLocal privilege escalation due to improper soft link handling. The following products are...2.2 Low
- acronis cyber protect home officeLocal privilege escalation due to insecure folder permissions. The following products are...7.3 High
- acronis cyber protect home officeLocal privilege escalation due to insecure folder permissions. The following products are...7.3 High
- bytecodealliance wasmtimewasmtime_trap_code C API function has out of bounds write vulnerability3.8 Low
- trellix dxl broker, mcafee data exchange layer +1 moreDXL Broker privilege escalation vulnerability6.5 Medium
- s::can moni::tools, badgermeter moni\ +1 mores::can moni::tools prone to path traversal in camera-file module7.5 High
- s::can moni::tools, badgermeter moni\ +1 mores::can moni::tools prone to path traversal in image-relocator module7.5 High
- badgermeter moni\, s::can moni:tools +1 mores::can moni::tools autheticated SQL injection8.8 High
- btcd project btcdbtcd mishandles witness size checking9.8 Critical
- objectfirst ootbiAn issue was discovered in Object First 1.0.7.712. The authorization service has a flow that...9.8 Critical
- objectfirst ootbiAn issue was discovered in Object First 1.0.7.712. A flaw was found in the Web Service, which...6.5 Medium
- objectfirst ootbiAn issue was discovered in Object First 1.0.7.712. Management protocol has a flow which allows a...8.8 High
- net-snmp, debian linux, netapp h300s firmware +3 more +5 morehandle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has...6.5 Medium
- net-snmp, debian linux, netapp h300s firmware +3 more +5 morehandle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a...6.5 Medium
- democritus d8s-xmlThe d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus d8s-networkingThe d8s-networking for python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-datesThe d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus d8s-statsThe d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus d8s-networkingThe d8s-networking for python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-pythonThe d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus d8s-urlsThe d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- gifdec project gifdecGifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds...7.8 High
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain an arbitrary file deletion...6.5 Medium
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- simple e-learning system project e-learning systemAn information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search...7.5 High
- oretnom23 human resource management systemHuman Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- oretnom23 human resource management systemA cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management...6.1 Medium
- democritus d8s-timerThe d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor...8.8 High
- democritus d8s-pythonThe d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus d8s-timerThe d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus d8s-stringsThe d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online tours and travels management system project tours and travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload...7.2 High
- canteen management system project management systemCanteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- oretnom23 food ordering management systemFood Ordering Management System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- oretnom23 food ordering management systemFood Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- passworkThe PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the...7.5 High
- passworkThe PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext...7.5 High
- apache commons bcel, fedoraproject fedora +1 moreApache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing9.8 Critical
- aureus erp, maxonerp maxon +1 moreMaxon ERP browse_data sql injection7.3 High
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - DOM in jgraph/drawio6.5 Medium
- qemuAn off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading...8.6 High
- f-secure safeWithSecure through 2022-08-10 allows attackers to cause a denial of service (issue 3 of 5).6.5 Medium
- f-secure safeWithSecure through 2022-08-10 allows attackers to cause a denial of service (issue 2 of 5).3.5 Low
- apache ivyApache Ivy allows path traversal in the presence of a malicious repository7.5 High
- apache ivyApache Ivy allows creating/overwriting any file on the system9.1 Critical
- carazo import and export users and customersImport and export users and customers < 1.20.5 - Subscriber+ CSV Injection8.0 High
- addify role based pricing for woocommerceRole Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload8.8 High
- Show moreLoading…