CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
KernelLinuxnetdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failedNo scoreKernelLinuxnet/mlx5: Fix possible use-after-free in async command interfaceNo scoreKernelLinuxriscv: mm: add missing memcpy in kasan_initNo scoreKernelLinuxnet: do not sense pfmemalloc status in skb_append_pagefrags()No score- ibm cics txIBM CICS TX cross-site scripting5.4 Medium
- ibm cics txIBM CICS TX phishing5.3 Medium
- ibm cics txIBM CICS TX information disclosure4.0 Medium
- silabs emberznet, silabs.com ember znet +1 moreMalformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier6.5 Medium
- ibm cics txIBM CICS TX information disclosure5.3 Medium
- ibm cics txIBM CICS TX information disclosure5.9 Medium
- silabs emberznet, silicon labs ember znet +1 moreMalformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier6.5 Medium
- ibm cics txIBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies4.3 Medium
- htmldoc project htmldocA heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to...7.5 High
- ibm mq internet pass-thruIBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in...5.1 Medium
- linux foundation software for open networking in the cloud (sonic), linuxfoundation software for open networking in the cloud +1 moreBuffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)8.1 High
containerized-data-importeropenSUSESecurity update for containerized-data-importerNo scorekubevirtopenSUSESecurity update for kubevirt stackNo score- apache soapApache SOAP allows unauthenticated users to potentially invoke arbitrary code9.8 Critical
- python pillowPillow subject to DoS via SAMPLESPERPIXEL tag7.5 High
- python pillowPillow vulnerable to Data Amplification attack.7.5 High
- ironmansoftware powershell universalThe Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory...7.2 High
- ironmansoftware powershell universalEscalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x...8.8 High
- apache jena sdbApache Jena SDB allows arbitrary deserialisation via JDBC9.8 Critical
- eyoucmsA cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute...5.4 Medium
- eyoucmsEyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...6.5 Medium
- eyoucmsEyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- concretecms concrete cmsConcrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cross-site Scripting via multilingual report6.1 Medium
- concretecms concrete cmsConcrete CMS Cross-site Scripting vulnerability4.8 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cross-site Request Forgery8.8 High
- concretecms concrete cmsConcrete CMS vulnerable to Reflected Cross-site Scripting6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cleartext Transmission of Sensitive Information5.3 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Improper Authentication6.3 Medium
- concretecms concrete cmsConcrete CMS vulnerable to XML External Entity5.3 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cross-site Scripting4.8 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Session Fixation5.4 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS6.5 Medium
- erambaA stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8...5.4 Medium
- eyoucmsEyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top...8.8 High
- xpdfreader xpdfXPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf...5.5 Medium
- tasmota project tasmotaTasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack...9.8 Critical
- rukovoditelRukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by...8.8 High
- canteen management system project management systemAn arbitrary file upload vulnerability in the image upload function of Canteen Management System...7.2 High
- siyucmsSiyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the...7.2 High
- wowonderWoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability...9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module6.1 Medium
- discourse calendar, discourse-calendar +1 moreDiscourse-calendar exposes members of hidden groups4.3 Medium
- aiphone gt-db-vn firmware, gt-dmb-lvn firmware, gt-dmb-n firmware +1 more +3 moreAiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against...6.5 Medium
- diffie-hellman key exchange project key exchangeUsing long exponents in the Diffie-Hellman Key Agreement Protocol allows remote attackers (from...7.5 High
- Show moreLoading…