CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- amazon opensearch notifications, opensearch-project notifications +1 moreOpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF)7.7 High
- mar10 wsgidavwsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled8.2 High
- element, vector-im element-ios +1 moreElement iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessions6.4 Medium
- archesproject archesArches vulnerable to SQL Injection8.6 High
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop vulnerable to code injection via malicious link6.6 Medium
- contiki-ngOut-of-bounds read and write in BLE L2CAP module4.2 Medium
- drogondrogon Session Hash small space of random values3.1 Low
- gpacGPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leak4.3 Medium
- hhims project hhimstsruban HHIMS Patient Portrait sql injection6.3 Medium
- crm42 project crm42tholum crm42 Login class.user.php sql injection7.3 High
- manydesigns portofinoManyDesigns Portofino WarFileLauncher.java createTempDir temp file2.6 Low
- publiccmssanluan PublicCMS Tab dwz.min.js initLink cross site scripting3.5 Low
- simple cashiering system project cashiering system, sourcecodester simple cashiering system +1 moreSourcecodester Simple Cashiering System User Account cross site scripting3.5 Low
- eolink goku liteeolinker goku_lite getList sql injection6.3 Medium
- eolink goku liteeolinker goku_lite list sql injection6.3 Medium
- kareadita kareadita/kavita, kavitareader kavita +1 moreImproper Restriction of Excessive Authentication Attempts in kareadita/kavita9.4 Critical
- aureus erpjerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload6.3 Medium
- foru cmsForU CMS cms_chip.php cross site scripting3.5 Low
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System cross site scripting4.3 Medium
- activity log project log, unspecified activity log plugin +1 moreActivity Log Plugin HTTP Header neutralization for logs5.3 Medium
- ferry project ferrylanyulei ferry task.go path traversal3.5 Low
- ferry project ferrylanyulei ferry API file.go path traversal6.3 Medium
ezsystems/ezpublish-kernelPackagisteZ Platform users with the Company admin role can assign any role to any userNo scoreezsystems/ezplatform-kernelPackagisteZ Platform users with the Company admin role can assign any role to any userNo scoreezsystems/repository-formsPackagisteZ Platform users with the Company admin role can assign any role to any userNo scoreezsystems/ezplatform-admin-uiPackagisteZ Platform users with the Company admin role can assign any role to any userNo scoreibexa/admin-uiPackagistIbexa DXP users with the Company admin role can assign any role to any userNo scoreibexa/corePackagistIbexa DXP users with the Company admin role can assign any role to any userNo scoreibexa/admin-uiPackagistibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortnameNo score- siemens siplus tim 1531 irc, tim 1531 irc, siplus tim 1531 irc firmware +2 moreA vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions <...6.9 Medium
- intel m10jnp2sb firmwareImproper input validation in the firmware for some Intel(R) Server Board M10JNP Family before...7.5 High
ezsystems/ezplatform-admin-uiPackagistezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)No score- sedlex traffic manager, traffic manager (wordpress plugin) +1 moreWordPress Traffic Manager plugin <= 1.4.5 - Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS)6.5 Medium
ibexa/graphqlPackagistGraphQL queries can expose password hashesNo score- etic telecom remote access server (ras), etictelecom remote access server firmware +1 moreETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity7.6 High
- etic telecom remote access server (ras), etictelecom remote access server firmware +1 moreETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type5.9 Medium
- etic telecom remote access server (ras), etictelecom remote access server firmware +1 moreETIC Telecom Remote Access Server Path Traversal6.2 Medium
- github.com/shamaton/msgpack/v2, messagepack project messagepack +1 morePanic in github.com/shamaton/msgpack/v27.5 High
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the module import function of the administrative interface of Cisco Firepower...4.3 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Firepower Management...4.8 Medium
- Show moreLoading…