CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- huawei emui, harmonyos +1 moreThe DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this...7.5 High
- huawei emui, harmonyos +1 moreThe power module has a vulnerability in permission verification. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe HiView module has a vulnerability of not filtering third-party apps out when the HiView...5.3 Medium
- huawei emui, harmonyos +1 moreThe lock screen module has defects introduced in the design process. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreThe iaware module has a vulnerability in thread security. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos +1 moreThe graphics display module has a UAF vulnerability when traversing graphic layers. Successful...7.5 High
- huawei emui, harmonyos +1 moreThe LBS module has a vulnerability in geofencing API access. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThere is a vulnerability in permission verification during the Bluetooth pairing process....4.3 Medium
- huawei emui, harmonyos +1 moreThe Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability...7.5 High
- huawei emui, harmonyos +1 moreThe kernel module has the vulnerability that the mapping is not cleared after the memory is...7.5 High
- lin-cms project lin-cmsLin CMS vulnerable to Improper Authentication6.6 Medium
- shopwindShopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in...6.1 Medium
- feehi feehicmsFeehiCMS is vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- foxitsoftware foxit readerAn Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569...7.8 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability...7.2 High
- intelliants subrion cmsSubrion CMS is vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- intelliants subrion cmsSubrion CMS is vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- csphere clansphereA cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute...6.1 Medium
- flatcore flatcore-cmsA cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute...6.1 Medium
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...9.8 Critical
- dedecmsDedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows...8.8 High
- cleoExponential ReDoS in cleo leads to denial of service5.9 Medium
- snowflake connector, snowflake-connector-python +1 moreExponential ReDoS in snowflake-connector-python leads to denial of service3.7 Low
- materialsproject pymatgenExponential ReDoS in pymatgen leads to denial of service5.9 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 moreWindows Scripting Languages Remote Code Execution Vulnerability8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 moreWindows CNG Key Isolation Service Elevation of Privilege Vulnerability7.8 High
- microsoft exchange server, exchange server 2016 cumulative update 22, exchange server 2016 cumulative update 23 +2 more +4 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +5 more +7 moreMicrosoft SharePoint Server Spoofing Vulnerability6.5 Medium
- microsoft windows sysmonMicrosoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0 +5 more +7 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Scripting Languages Remote Code Execution Vulnerability7.5 High
- microsoft windows 7, windows 7 service pack 1, windows server 2008 r2 service pack 1 +2 more +4 moreWindows Point-to-Point Tunneling Protocol Denial of Service Vulnerability5.9 Medium
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +6 more +8 moreWindows Bind Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +9 more +11 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +3 more +5 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Excel Security Feature Bypass Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +16 more +18 moreMicrosoft Word Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +13 more +15 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +13 more +15 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +17 more +19 moreWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +8 more +10 moreBitLocker Security Feature Bypass Vulnerability4.6 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows GDI+ Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreNetwork Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…