CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- sap se netweaver abap server and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users...4.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...8.7 High
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...4.9 Medium
- sap 3d visual enterprise author, 3d visual enterprise viewer +1 moreDue to lack of proper memory management, when a victim opens manipulated file received from...7.0 High
- sap financial consolidationDue to insufficient input validation, SAP Financial Consolidation - version 1010, allows an...5.4 Medium
- sap biller directSAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When...6.1 Medium
- sap gui, sap se gui for windows +1 moreSAP GUI allows an authenticated attacker to execute scripts in the local network. On successful...5.5 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (central management console and bi launchpad) +1 moreIn some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad)...9.9 Critical
- debian linux, sysstat, fedoraproject fedora +2 moresysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow7.0 High
- openfgaOpenFGA Authorization Bypass4.8 Medium
- azure-rtos filex, microsoft azure rtos filex +1 moreAzure RTOS FileX vulnerable to Buffer Offerflow5.6 Medium
- grafanaGrafana vulnerable to race condition allowing privilege escalation9.8 Critical
- siemens parasolid, parasolid v34.0, parasolid v34.1 +2 more +4 moreA vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34...7.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- zte zaip-aieThere is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the...5.3 Medium
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c....5.5 Medium
- symantec endpoint detection and responseSymantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to...9.8 Critical
- intel qatzipImproper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may...7.8 High
- electronElectron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect7.2 High
- nec expresscluster x, nec corporation clusterpro x, nec expresscluster x singleserversafe +2 moreUncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5...9.8 Critical
- nec expresscluster x, nec corporation clusterpro x, nec expresscluster x singleserversafe +2 moreWeak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier,...9.8 Critical
- nec expresscluster x, nec corporation clusterpro x, nec expresscluster x singleserversafe +2 moreBuffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0...9.8 Critical
- nec expresscluster x, nec corporation clusterpro x, nec expresscluster x singleserversafe +2 morePath traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0...9.8 Critical
- mitsubishi electric corporation air conditioning mfz-gxt50/60/73vfk, air conditioning mfz-xt50/60vfk, air conditioning msxy-fp05/07/10/13/18/20/24vgk-sg1 +273 more +275 moreCross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air...6.1 Medium
- mitsubishi electric corporation air conditioning mfz-gxt50/60/73vfk, air conditioning mfz-xt50/60vfk, air conditioning msxy-fp05/07/10/13/18/20/24vgk-sg1 +452 more +454 moreCleartext Transmission of Sensitive Information vulnerability due to the use of Basic...9.8 Critical
- google android, mediatek, inc. mt6833, mt6873, mt6893, mt8798 +1 moreIn typec, there is a possible out of bounds write due to an incorrect calculation of buffer size....6.8 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6895, mt6983, mt8798 +1 moreIn typec, there is a possible out of bounds write due to an incorrect calculation of buffer size....6.8 Medium
- google android, mediatek, inc. mt6983, mt8871, mt8891 +1 moreIn isp, there is a possible out of bounds write due to uninitialized data. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6983, mt8871, mt8891 +1 moreIn ccd, there is a possible out of bounds write due to uninitialized data. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6893, mt6983, mt8168, mt8365, mt8797, mt8798 +1 moreIn audio, there is a possible memory corruption due to a logic error. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6762, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8168, mt8185, mt8365, mt8696, mt8768, mt8786, mt8789, mt8791, mt8797, mt8798 +1 moreIn vcu, there is a possible memory corruption due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6762, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8168, mt8185, mt8365, mt8696, mt8768, mt8786, mt8789, mt8791, mt8797, mt8798 +1 moreIn vcu, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn isp, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6762, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8168, mt8185, mt8365, mt8696, mt8768, mt8786, mt8789, mt8791, mt8797, mt8798 +1 moreIn vcu, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6762, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8168, mt8185, mt8365, mt8696, mt8768, mt8786, mt8789, mt8791, mt8797, mt8798 +1 moreIn vcu, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6893, mt6895 +1 moreIn jpeg, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791, mt8791t, mt8795t, mt8797, mt8871, mt8891 +1 moreIn aee, there is a possible use after free due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6879, mt6893, mt6895, mt6985, mt8795t, mt8798 +1 moreIn gpu drm, there is a possible out of bounds write due to improper input validation. This could...6.7 Medium
- netwrix auditorRemote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording...9.8 Critical
- siemens 6ag1151-8ab01-7ab0 firmware, 6ag1151-8fb01-2ab0 firmware, 6ag1314-6eh04-7ab0 firmware +211 more +213 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET...6.5 Medium
- zkteco biotimeZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an...5.3 Medium
- mediatek lr12a, lr13, nr15 +2 more +4 moreIn Modem 4G RRC, there is a possible system crash due to improper input validation. This could...7.5 High
- google android, mediatek, inc. mt6771, mt6779, mt6785, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6891, mt6893, mt8168, mt8175, mt8183, mt8365, mt8385, mt8788 +1 moreIn vpu, there is a possible information disclosure due to an incorrect bounds check. This could...6.7 Medium
- perfexcrm perfex crmperfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.5.4 Medium
- bluetooth core specificationAn information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in...4.3 Medium
- fastify fastify-websocket, websocket +1 morefastify-websocket vulnerable to uncaught exception via crash on malformed packet7.5 High
- acronis cyber protect home officeSensitive information disclosure due to insecure folder permissions. The following products are...2.2 Low
- acronis cyber protect home officeSensitive information leak through log files. The following products are affected: Acronis Cyber...4.0 Medium
- acronis cyber protect home officeLocal privilege escalation due to DLL hijacking vulnerability. The following products are...2.2 Low
- Show moreLoading…