CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability5.4 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- searchwpWordPress SearchWP premium plugin <= 4.2.5 - Broken Authentication vulnerability5.4 Medium
- 5-anker 5 anker connect, 5 anker gmbh anker connect (wordpress plugin) +1 moreWordPress 5 Anker Connect plugin <= 1.2.6 - Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- algolplus advanced order export for woocommerce, advanced order export for woocommerce (wordpress plugin) +1 moreWordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- rymera advanced coupons, rymera web co advanced coupons (wordpress plugin) +1 moreWordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.5 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- algolplus advanced dynamic pricing for woocommerce, advanced dynamic pricing for woocommerce (wordpress plugin) +1 moreWordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- parse-community parse-serverParse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser9.8 Critical
containerized-data-importeropenSUSESecurity update for containerized data importerNo scorekubevirtopenSUSESecurity update for kubevirtNo scorevsftpdopenSUSESecurity update for vsftpdNo scorevsftpdSUSESecurity update for vsftpdNo scorevsftpdopenSUSESecurity update for vsftpdNo scorewasmtimeOSS-FuzzUNKNOWN WRITE in wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877No scorepcapplusplusOSS-FuzzUNKNOWN READ in pcpp::SomeIpSdLayer::SomeIpSdLayerNo scoreopensipsOSS-FuzzHeap-buffer-overflow in parse_via_paramNo score- apple ipados, macos, safari +3 more +5 moreA memory consumption issue was addressed with improved memory handling. This issue is fixed in...8.8 High
- huawei emui, harmonyos +1 moreMissing parameter type validation in the DRM module. Successful exploitation of this...7.5 High
- mendix saml, siemens mendix saml (mendix 7 compatible), mendix saml (mendix 8 compatible) +2 more +4 moreA vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions <...9.8 Critical
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the...5.5 Medium
- picoc project picocPicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the...5.5 Medium
- html2xhtml project html2xhtmlhtml2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void...8.1 High
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions). User credentials are stored...7.6 High
- siemens power meter sicam q100, sicam p850, sicam p855 +5 more +7 moreA vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER...9.9 Critical
- siemens power meter sicam q100, sicam p850, sicam p855 +2 more +4 moreA vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER...9.9 Critical
- siemens power meter sicam q100, sicam p850, sicam p855 +3 more +5 moreA vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER...9.9 Critical
- siemens power meter sicam q100, 7kg9501-0aa01-2aa1 firmware, 7kg9501-0aa31-2aa1 firmware +2 moreA vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER...7.5 High
- siemens parasolid, parasolid v34.0, parasolid v34.1 +2 more +4 moreA vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34...7.8 High
- n-prolog project n-prologN-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function...7.5 High
- canteen management system project management systemA cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to...5.4 Medium
- arm valhall gpu kernel driverAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...8.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization...7.8 High
- eyesofnetwork web interfaceEyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- eyesofnetwork web interfaceEyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS)...4.8 Medium
- eyesofnetwork web interfaceEyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS)...4.8 Medium
- sap financial consolidationSAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input...6.1 Medium
- sap sql anywhereSAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users...6.5 Medium
- sap financial consolidationDue to insufficient input validation, SAP Financial Consolidation - version 1010, allows an...6.5 Medium
- Show moreLoading…