CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally7.5 High
- jenkins loader.io, jenkins project loader.io plugin +1 moreMissing permission check in Jenkins loader.io Plugin allows enumerating credentials IDs4.3 Medium
- jenkins xp-dev, jenkins project xp-dev plugin +1 moreMissing Authorization in Jenkins XP-Dev Plugin5.3 Medium
- jenkins config rotator, jenkins project config rotator plugin +1 moreJenkins Config Rotator Plugin vulnerable to path traversal7.5 High
- jenkins bart, jenkins project bart plugin +1 moreJenkins BART Plugin vulnerable to cross-site scripting (XSS)5.4 Medium
- jenkins violations, jenkins project violations plugin +1 moreXML External Entity Reference in Jenkins Violations Plugin5.5 Medium
- jenkins project cloudbees docker hub/registry notification plugin, jenkins cloudbees docker hub\/registry notification +1 moreLack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin7.5 High
- jenkins reverse proxy auth, jenkins project reverse proxy auth plugin +1 moreJenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords6.5 Medium
- jenkins support core, jenkins project support core plugin +1 moreIncorrect permission checks in Jenkins Support Core Plugin6.5 Medium
- jenkins naginator, jenkins project naginator plugin +1 moreCross-site Scripting in Jenkins Naginator Plugin5.4 Medium
- jenkins pipeline utility steps, jenkins project pipeline utility steps plugin +1 moreArbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin8.1 High
- jenkins junit, jenkins project junit plugin +1 moreJenkins JUnit Plugin subject to Cross-site Scripting via URL conversion5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreWhole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions7.5 High
- wordpressImproper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote...5.3 Medium
- wordpressCross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote...6.1 Medium
- wordpressCross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote...6.1 Medium
- limesurveyLimeSurvey v5.4.4 was discovered to contain a SQL injection vulnerability via the component ...7.2 High
- canteen management system project management systemAn arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen...9.8 Critical
- xpdfreader xpdfA stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows...5.5 Medium
- atlassian confluence data centerIn the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is...7.5 High
- atlassian confluence data centerThe Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to...7.5 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL5.9 Medium
- liferay portal, digital experience platform +1 moreImproper Certificate Validation in Liferay Portal4.8 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay Portal4.3 Medium
- liferay portal, digital experience platform +1 moreAuthorization Bypass in Liferay Portal4.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay Portal5.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay Portal5.3 Medium
- liferay portal, digital experience platform +1 moreMissing permissions check in Liferay Portal4.3 Medium
- liferay portal, digital experience platform +1 morePath Traversal in Liferay Portal7.5 High
- liferay portal, digital experience platform +1 moreInefficient Regular Expression Complexity in Liferay Portal7.5 High
- liferay portal, digital experience platform +1 morePath Traversal in Liferay Portal7.5 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module9.8 Critical
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module5.4 Medium
- tenda w15e firmwareTenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via...7.5 High
- tenda w15e firmwareTenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via...9.8 Critical
- tenda w15e firmwareTenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection...7.8 High
- amazon opensearch, embysupport security +1 moreIssue with fine-grained access control of indices backing data streams6.3 Medium
- amazon opensearchIncorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch4.3 Medium
- heimdal, debian linux +1 moreRead one byte past a buffer when normalizing Unicode5.9 Medium
- tenda w15e firmwareTenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command...7.8 High
- tenda w15e firmwareTenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection...7.8 High
- tenda w15e firmwareIn Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection...7.8 High
- tenda w15e firmwareIn Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS)...4.8 Medium
- tenda w15e firmwareThe Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure...6.5 Medium
- tenda w15e firmwareIn Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a...5.4 Medium
- tenda w15e firmwareThe Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization /...4.9 Medium
- Show moreLoading…