CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- grafanaGrafana contains Improper Input Validation6.4 Medium
- google chrome, debian linux +1 moreHeap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a...9.6 Critical
- google chrome, debian linux +1 moreType confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...8.8 High
- google chrome, debian linux +1 moreUse after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...8.8 High
- google chrome, debian linux +1 moreUse after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker...8.8 High
- google chrome, debian linux +1 moreUse after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote...8.8 High
- google chrome, debian linux +1 moreUse after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...8.8 High
- gitlabAn improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5,...3.5 Low
- gitlabAn uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all...5.3 Medium
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreNetlogon RPC Elevation of Privilege Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Hyper-V Denial of Service Vulnerability6.5 Medium
- microsoft windows subsystem for linux (wsl2), windows subsystem for linux, azure eflow +1 more +3 moreWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Group Policy Elevation of Privilege Vulnerability7.8 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos Elevation of Privilege Vulnerability7.2 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos RC4-HMAC Elevation of Privilege Vulnerability8.1 High
- gitlabAn improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5,...4.3 Medium
- gitlabLack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior...4.8 Medium
- gitlabImproper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4...3.1 Low
- gitlabAn open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5,...4.7 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15...5.5 Medium
- gitlabIncorrect authorization during display of Audit Events in GitLab EE affecting all versions from...4.3 Medium
- gitlabBypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3...5.3 Medium
- gitlabAn open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to...3.5 Low
- gitlabA cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to...7.3 High
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious...9.8 Critical
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS)...6.1 Medium
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A...9.8 Critical
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability....9.8 Critical
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A...9.8 Critical
- sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 morePost-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API1.9 Low
- gitlabAn information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5,...4.3 Medium
- huawei emui, harmonyos +1 moreThe memory management module has the logic bypass vulnerability. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe DRM module has a vulnerability in verifying the secure memory attributes. Successful...9.8 Critical
- microsoft .net framework, .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2, .net framework 4.6.2 +8 more +10 more.NET Framework Information Disclosure Vulnerability5.8 Medium
- citrix application delivery controller firmware, gateway, citrix adc, gateway +2 moreUser login brute force protection functionality bypass5.3 Medium
- citrix gateway, application delivery controller firmware, gateway, citrix adc +2 moreUnauthorized access to Gateway user capabilities9.8 Critical
- citrix application delivery controller firmware, gateway, citrix adc, gateway +2 moreRemote desktop takeover via phishing8.3 High
ffmpegMageiaUpdated ffmpeg packages fix security vulnerabilityNo scorebluezMageiaUpdated bluez packages fix security vulnerabilityNo score- joomla joomla\!, joomla! project cms +1 more[20221101] - Core - RXSS through reflection of user input in com_media6.1 Medium
- codeandmore wp page widget, wp page widget (wordpress plugin) +1 moreWordPress WP Page Widget plugin <= 3.9 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- slidervilla testimonial slider, david anderson testimonial slider (wordpress plugin) +1 moreWordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability6.1 Medium
- advanced ads gmbh ads – ad manager & adsense, wpadvancedads advanced ads - ad manager \& adsense +1 moreWordPress Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- webartesanal mantenimiento web, carlos doral mantenimiento web (wordpress plugin) +1 moreWordPress Mantenimiento web plugin <= 0.13 - Auth. Cross-Site Scripting (XSS) vulnerability4.8 Medium
- aioseo all in one seo, semper plugins, llc all in one seo pro (wordpress plugin) +1 moreWordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerability3.0 Low
- analytify (wordpress plugin), - google analytics dashboard +1 moreWordPress Analytify plugin <= 4.2.2 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability6.3 Medium
- fatcatapps analytics cat, fatcat apps analytics cat (wordpress plugin) +1 moreWordPress Analytics Cat plugin <= 1.0.9 - Plugin Settings change via Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- activity log project log, activity log team log (wordpress plugin) +1 moreWordPress Activity Log plugin <= 2.8.3 - CSV Injection vulnerability7.4 High
- getshortcodes shortcodes ultimate, vladimir anokhin shortcodes ultimate (wordpress plugin) +1 moreWordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS6.1 Medium
- Show moreLoading…