CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- ezsystems ezplatform-graphqlezplatform-graphql GraphQL queries can expose password hashes7.5 High
- infotel tasklistsInfotelGLPI vulnerable to Cross-site Scripting8.8 High
- facebook redexDexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of...9.8 Critical
- eclipse deeplearning4jSome Deeplearning4J packages use unclaimed s3 bucket in tests and examples5.3 Medium
- dotcmsdotCMS before 22.06 allows remote attackers to bypass intended access control and obtain...6.1 Medium
- bmc remedy it service management suiteAn issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote...5.4 Medium
- mm-wki project mm-wkimm-wiki is vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- glyphandcog xpdfreaderxpdfreader 4.03 is vulnerable to Buffer Overflow.7.5 High
- istioIstio may allow identity impersonation if user has localhost access7.6 High
- simple video embedder project video embedder, james lao simple video embedder (wordpress plugin) +1 moreWordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...5.5 Medium
- parse-community parse-serverParse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers7.2 High
- amd link android, link +1 moreInsufficient access controls in the AMD Link Android app may potentially result in information...7.5 High
- amd μprof, uprof +1 moreInsufficient validation of the IOCTL input buffer in AMD ?Prof may allow an attacker to send an...7.5 High
- amd μprof, uprof +1 moreInsufficient validation in the IOCTL input/output buffer in AMD ?Prof may allow an attacker to...7.5 High
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 moreInsufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds...7.8 High
- amd radeon rx 6000 series & pro w6000 series, enterprise driver, radeon pro software +1 more +3 moreAn attacker with local access to the system can make unauthorized modifications of the security...7.8 High
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded r1000 +70 more +72 moreInsufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE)...5.5 Medium
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, enterprise driver +25 more +27 moreInsufficient verification of multiple header signatures while loading a Trusted Application (TA)...7.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +106 more +108 moreImproper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged...7.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +103 more +105 moreImproper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged...7.8 High
- devolutions server, go-vela ui, worker +2 moreVela Insecure Defaults9.6 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of...9.8 Critical
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console infct functionality of InHand Networks...4.3 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of...6.5 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console nvram functionality of InHand Networks...4.9 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console support functionality of InHand...6.5 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console verify functionality of InHand Networks...6.5 Medium
- inhand networks inrouter302, inhandnetworks inrouter302 firmware +1 moreThe firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and...7.4 High
- palo alto networks cortex xsoarCortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine6.7 Medium
- phoenixcontact fl mguard dm, phoenix contact fl mguard dm (2981974) +1 morePHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management7.5 High
- kaden picoflux air, kadenvodomery picoflux air firmware +1 moreHardcoded credentials in Kaden PICOFLUX AiR6.5 Medium
- zohocorp zoho crm lead magnet, zoho crm lead magnet (wordpress plugin) +1 moreWordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability8.8 High
- algolplus advanced dynamic pricing for woocommerce, advanced dynamic pricing for woocommerce (wordpress plugin) +1 moreWordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Out-of-bounds Write9.8 Critical
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling7.5 High
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Out-of-bounds Read8.2 High
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Memory Overflow9.1 Critical
- opensuse factory, openldap2 +1 moreopenldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself7.1 High
- xfce xfce4-settings, debian linux, fedoraproject fedora +2 moreIn Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection...9.8 Critical
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 High
- varnish-software varnish cache, varnish cache project cache, debian linux +2 more +4 moreAn HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x...7.5 High
- varnish cache project cache, fedoraproject fedora +1 moreAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request...7.5 High
- huawei emui, harmonyos +1 moreThere is a race condition vulnerability in SD upgrade mode. Successful exploitation of this...5.9 Medium
- huawei emui, harmonyos +1 moreThe system framework layer has a vulnerability of serialization/deserialization mismatch....9.8 Critical
- huawei emui, harmonyos +1 moreThe preset launcher module has a permission verification vulnerability. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe launcher module has an Intent redirection vulnerability. Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreThe AMS module has a vulnerability of serialization/deserialization mismatch. Successful...9.8 Critical
- huawei emui, harmonyos +1 moreThe AMS module has a vulnerability of serialization/deserialization mismatch. Successful...9.8 Critical
- huawei emui, harmonyos +1 moreThe SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions...7.5 High
- Show moreLoading…