CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow...5.3 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC)...5.3 Medium
- cisco cyber vision, firepower threat defense software, meraki mx security appliance firmware +1 more +3 moreMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort...5.8 Medium
- cisco cyber vision, firepower threat defense software, umbrella insights virtual appliance +2 more +4 moreMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort...5.8 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower services software for asa +2 more +4 moreA vulnerability in the authentication and authorization flows for VPN connections in Cisco...5.8 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web management interface of the Cisco Firepower Management Center (FMC)...6.3 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web management interface of the Cisco Firepower Management Center (FMC)...6.3 Medium
- cisco firepower extensible operating system (fxos), firepower threat defense software, firepower extensible operating system +1 more +3 moreA vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS...6.0 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD)...5.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software...6.5 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are...6.4 Medium
- cisco firepower management center, firepower threat defense software, secure firewall management center +1 more +3 moreA vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC)...7.5 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive...7.7 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower services software for asa +2 more +4 moreA vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and...7.7 High
- cisco firepower management center, firepower services software for asa, secure firewall management center +2 moreA vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco...7.5 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security...8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco...8.6 High
readthedocsnpmRead the Docs vulnerable to Cross-Site Scripting (XSS)No score@redwoodjs/apinpmRedwood is vulnerable to account takeover via dbAuth "forgot-password"8.2 HighmrubyOSS-FuzzUNKNOWN READ in pack_unpackNo scoremrubyOSS-FuzzIndex-out-of-bounds in str_init_embedNo scorelibrawOSS-FuzzHeap-buffer-overflow in LibRaw_buffer_datastream::readNo scoreutil-linuxOSS-FuzzStack-buffer-overflow in merge_utf16be_asciiNo scorefirefoxUbuntufirefox vulnerabilitiesNo score- wiesemann & theis at-modem-emulator, com-server ++, com-server 20ma +31 more +33 moreWiesemann & Theis: Small number space for allocating session id in Com-Server family8.8 High
- wiesemann & theis at-modem-emulator, com-server ++, com-server 20ma +31 more +33 moreWiesemann & Theis: XSS vulnerability in web interface of the Com-Server family5.4 Medium
- wiesemann & theis at-modem-emulator, com-server ++, com-server 20ma +31 more +33 moreWiesemann & Theis: Authentication bypass in Com-Server family9.8 Critical
- hashicorp nomad, nomad enterprise +1 moreNomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected2.7 Low
- hashicorp nomad, nomad enterprise +1 moreNomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/5.0 Medium
- flowring agentflow, agentflow bpm +1 moreFLOWRING Agentflow BPM - Broken Access Control8.8 High
- flowring agentflow, agentflow bpm +1 moreFLOWRING Agentflow BPM - Path Traversal7.5 High
- flowring agentflow, agentflow bpm +1 moreFLOWRING Agentflow BPM - Arbitrary File Upload9.8 Critical
- powercom co., ltd. upsmon proPOWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information7.5 High
- powercom co., ltd. upsmon proPOWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials6.5 Medium
- powercom co., ltd. upsmon proPOWERCOM CO., LTD. UPSMON PRO - Path Traversal6.5 Medium
- powercom co., ltd. upsmon proPOWERCOM CO., LTD. UPSMON PRO - Broken Authentication9.8 Critical
- plesk obsidianPlesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an...6.5 Medium
- payaraPayara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF7.5 High
- invisible-island xterm, fedoraproject fedora +1 morexterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have...9.8 Critical
- lineagrafica eu cookie law gdprThe EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection...9.1 Critical
- ecisp espcmsESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the...9.8 Critical
- ecisp espcmsESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the...9.8 Critical
- ecisp espcmsESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the...9.8 Critical
- owncloudThe Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the...4.2 Medium
- ayacms project ayacmsAyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component ...9.8 Critical
- parse-community parse-serverParse Server subject to Prototype pollution via Cloud Code Webhooks7.2 High
- Show moreLoading…