CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- mz automation libiec61850MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal5.5 Medium
- nukeviet cms, nukeviet +1 moreNukeViet CMS Data URL Request.php filterAttr cross site scripting3.5 Low
- axiomatic bento4Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow6.3 Medium
- hms-php project hms-phpPingkon HMS-PHP Data Pump Metadata admin.php sql injection7.3 High
- hms-php project hms-phpPingkon HMS-PHP adminlogin.php sql injection7.3 High
- matrix-org matrix-appservice-irc, matrix irc bridge +1 morematrix-appservice-irc PgDataStore.ts sql injection4.6 Medium
- libtiff, apple ipados, iphone os +4 more +6 moreLibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow6.3 Medium
- openkmOpenKM FileUtils.java getFileExtension temp file2.6 Low
- emlogemlog article_save.php cross site scripting3.5 Low
- unspecified vesta control panel, vestacp control panel +1 moreVesta Control Panel sed main.sh argument injection5.3 Medium
- ultimatemember ultimate member, unspecified ultimate member plugin +1 moreUltimate Member Plugin Template class-shortcodes.php load_template pathname traversal4.3 Medium
- ffmpegffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds4.3 Medium
- ffmpegffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds4.3 Medium
fluent-bitOSS-FuzzHeap-use-after-free in output_threadNo scoregstreamerOSS-FuzzHeap-buffer-overflow in parse_subripNo scoresuricataOSS-FuzzUse-of-uninitialized-value in TLSDecodeHandshakeHelloNo scoreopensipsOSS-FuzzHeap-buffer-overflow in parse_content_lengthNo score- hyperledger fabricHyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by...7.5 High
- simplex chat, simplexmq +1 moreSimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation...5.3 Medium
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...7.8 High
- zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 moreZoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus...9.8 Critical
- zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 moreZoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus...9.8 Critical
- zohocorp manageengine mobile device manager plusIn Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration...7.8 High
- zohocorp manageengine servicedesk plus msp, manageengine supportcenter plus +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are...8.8 High
- sir gnuboard, unspecified gnuboard5 +1 moregnuboard5 FAQ Key ID faq.php cross site scripting3.5 Low
- vmware hyperic agent** UNSUPPORTED WHEN ASSIGNED ** A remote insecure deserialization vulnerability exixsts in VMWare...9.9 Critical
- vmware hyperic server** UNSUPPORTED WHEN ASSIGNED ** A security filter misconfiguration exists in VMware Hyperic...9.8 Critical
- vmware hyperic server** UNSUPPORTED WHEN ASSIGNED ** A remote unauthenticated insecure deserialization vulnerability...10.0 Critical
- ibm mqIBM MQ denial of service5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server cross-site scripting5.4 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting....5.4 Medium
- ibm websphere application serverIBM WebSphere Application Server cross-site scripting5.4 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to...7.1 High
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated...7.1 High
- ibm power fw, powervm hypervisor +1 moreIBM Power FW security bypass5.5 Medium
- google protobuf-java, protobuf-javalite, protocolbuffers +2 moreParsing issue in protobuf message-type extension7.5 High
- intel vtune profilerUncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may...6.7 Medium
- intel system studioUncontrolled search path in the software installer for Intel(R) System Studio for all versions,...6.7 Medium
- intel corporation intel(r) proset/wireless wifi software, intel dual band wireless-ac 3165 firmware, dual band wireless-ac 3168 firmware +12 more +14 moreOut-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may...6.5 Medium
- intel nuc7i3dnbe firmware, nuc7i3dnhe firmware, nuc7i3dnhnc firmware +8 more +10 moreImproper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and...6.7 Medium
- intel wlan authentication and privacy infrastructureImproper access control in the Intel(R) WAPI Security software for Windows 10/11 before version...3.3 Low
- intel converged security and manageability engine, core i3-1000g1 firmware, core i3-1000g4 firmware +339 more +341 moreImproper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and...4.3 Medium
- intel nuc kit wireless adapter driver installerUncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter...6.7 Medium
- intel nuc kit wireless adapter driver installerIncorrect default permissions in the installer software for some Intel(r) NUC Kit Wireless...6.7 Medium
- intel nuc kit wireless adapter driver installerPath traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for...6.7 Medium
- intel nuc kit wireless adapter driver installerUnquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers...6.7 Medium
- intel core i5-7640x firmware, core i7-3820 firmware, core i7-3920xm firmware +127 more +129 moreImproper input validation in the BIOS firmware for some Intel(R) Processors may allow a...8.2 High
- intel celeron 1000m firmware, celeron 1005m firmware, celeron 1007u firmware +458 more +460 moreTime-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may...7.9 High
- intel m50cyp1ur204 firmware, m50cyp1ur212 firmware, m50cyp2ur208 firmware +1 more +3 moreUncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version...6.0 Medium
- intel nuc board nuc5i3mybe firmware, nuc kit nuc5i3myhe firmware +1 moreInsecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel...5.2 Medium
- Show moreLoading…