CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- apache archivaApache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories4.3 Medium
- apache archivaApache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files7.5 High
- statamic cmsWBCE CMS Header class.login.php increase_attempts excessive authentication3.7 Low
- mercurial scmMonikaBrzica scm uredi_korisnika.php sql injection6.3 Medium
- mercurial scmMonikaBrzica scm upis_u_bazu.php sql injection6.3 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreSSL/TLS certificate validation unconditionally disabled by Jenkins NS-ND Integration Performance Publisher Plugin7.5 High
- esri arcgis quickcapture, arcgis quickcapture +1 moreAn unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.6.1 Medium
- gnu grub2, redhat enterprise linux +1 moreWhen rendering certain unicode sequences, grub2's font code doesn't proper validate if the...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +232 more +234 moreTransient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +236 more +238 moreTransient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in...7.5 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, csr8811 firmware +76 more +78 moreTransient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qca6310 firmware +108 more +110 moreMemory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute,...7.3 High
- insyde kernelManipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite...8.2 High
- insyde kernelInitialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI...8.2 High
- zoneminderSession fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie...4.6 Medium
- zoneminderA Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute...5.4 Medium
- insyde kernelIn UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB...7.5 High
- insyde kernelUse of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and...8.2 High
- insyde kernelIncorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS...8.2 High
- amd genoa firmware, hygon 1 firmware, hygon 2 firmware +36 more +38 moreIncorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM...8.8 High
- insyde kernelSMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in...8.2 High
- insyde kernelIn UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers...8.2 High
- fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 moreA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...8.6 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm ar8031 firmware, csra6620 firmware +19 more +21 moreDenial of service in modem due to infinite loop while parsing IGMPv2 packet from server in...7.5 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm ar8031 firmware, csra6620 firmware +19 more +21 moreMemory Corruption in modem due to improper length check while copying into memory in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +60 more +62 moreDenial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qca6390 firmware +65 more +67 moreDenial of service in video due to improper access control in broadcast receivers in Snapdragon...6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qam8295p firmware +105 more +107 moreInformation disclosure in video due to buffer over-read while parsing avi files in Snapdragon...6.8 Medium
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm ar8031 firmware, csra6620 firmware +14 more +16 moreCryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in...6.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm ar8035 firmware, qca8081 firmware +12 more +14 moreDenial of service in MODEM due to reachable assertion in Snapdragon Mobile7.5 High
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar9380 firmware, csr8811 firmware +67 more +69 moreInformation disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired...7.5 High
- unspecified phpservermon, phpservermonitor php server monitor +1 morephpservermon User.php setUserLoggedIn predictable algorithm in random number generator2.6 Low
- unspecified phpservermon, phpservermonitor php server monitor +1 morephpservermon User.php generatePasswordResetToken predictable algorithm in random number generator2.6 Low
- palantir foundry code-workbooksThe Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.4.2 Medium
- zoom meetings, zoom video communications inc client for meetings (for android, ios, linux, macos, and windows), zoom rooms +2 more +4 moreLocal information exposure in Zoom Clients3.3 Low
KernelLinuxusb: mon: make mmapped memory read onlyNo scoreKernelLinuxnilfs2: fix leak of nilfs_root in case of writer thread creation failureNo scoreKernelLinuxfs: fix UAF/GPF bug in nilfs_mdt_destroyNo scoreKernelLinuxnilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()No scoreKernelLinuxnilfs2: fix use-after-free bug of struct nilfs_rootNo scoreKernelLinuxscsi: stex: Properly zero out the passthrough command structureNo scoreKernelLinuxnilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failureNo scoreKernelLinuxregulator: qcom_rpm: Fix circular deferral regressionNo scoreKernelLinuxALSA: usb-audio: Fix potential memory leaksNo scoreKernelLinuxxen/gntdev: Prevent leaking grantsNo scoreKernelLinuxUM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACKNo scoreKernelLinuxsh: machvec: Use char[] for section boundariesNo scoreKernelLinuxfbdev: smscufx: Fix use-after-free in ufx_ops_open()No scoreKernelLinuxext4: avoid crash when inline data creation follows DIO writeNo scoreKernelLinuxext4: fix null-ptr-deref in ext4_write_infoNo score- Show moreLoading…