CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- equalweb accessibility widgetEqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0...5.4 Medium
- zulip, zulip server +1 moreNon-constant-time SCIM token comparison in Zulip Server3.7 Low
- freerdp, fedoraproject fedora +1 moreMissing input length validation in `drive` channel in FreeRDP4.6 Medium
- ibm infosphere datastage, infosphere information server, infosphere information server on cloud +2 moreIBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper...9.8 Critical
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreMissing Authentication for Critical Function in ikus060/rdiffweb6.1 Medium
- freeprojectscodes sports club management system, sports club management system project club management system +1 moreSports Club Management System make_payments.php sql injection4.7 Medium
- feehi feehicmsFeehiCMS Post My Comment Tab cross-site request forgery4.3 Medium
- hospital management center project management center, unspecified hospital management center +1 moreHospital Management Center appointment.php cross-site request forgery4.3 Medium
- hospital management center project management center, unspecified hospital management center +1 moreHospital Management Center patient-info.php sql injection6.3 Medium
- simple history project history, unspecified simple history plugin +1 moreSimple History Plugin Header neutralization for logs6.5 Medium
- sophos mobile, mobile managed on-premises +1 moreAn XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and...9.8 Critical
- kubevelaSSRF vulnerability in KubeVela VelaUX APIServer4.9 Medium
- freerdp, fedoraproject fedora +1 moreMissing path sanitation with `drive` channel in FreeRDP2.6 Low
- freerdp, fedoraproject fedora +1 moreHeap buffer overflow in urbdrc channel5.5 Medium
- freerdp, fedoraproject fedora +1 moreMissing length validation in urbdrc channel in FreeRDP4.6 Medium
- freerdp, fedoraproject fedora +1 moreDivision by zero in urbdrc channel in FreeRDP4.8 Medium
- freerdp, fedoraproject fedora +1 moreOut of bounds read in zgfx decoder in FreeRDP4.6 Medium
- freerdp, fedoraproject fedora +1 moreOut of bound read in FreeRDP4.8 Medium
- joinmastodon mastodon, mastodon mastodon/mastodon +1 moreImproper Restriction of Excessive Authentication Attempts in mastodon/mastodon9.8 Critical
- simple image gallery web app project image gallery web appA SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through ...8.8 High
- hashicorp consul, consul enterprise +1 moreConsul Peering Imported Nodes/Services Leak5.3 Medium
- palantir foundry build2A component in Foundry logging was found to be capturing sensitive information in logs.4.2 Medium
- tibco spotfire analyst, spotfire analytics platform, spotfire desktop +2 more +4 moreTIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability9.0 Critical
- hp inc. certain hp envy, officejet, and deskjet printers, hp m2u75a firmware, m2u76a firmware +39 more +41 moreCertain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.7.5 High
- hallo welt! gmbh bluespicePotential XSS in book navigation3.3 Low
- hallo welt! gmbh bluespicePotential XSS in comment section3.3 Low
- hallo welt! gmbh bluespicePotential XSS in history view3.3 Low
- hallo welt! gmbh bluespicePotential XSS on default page header3.3 Low
- hallo welt! gmbh bluespicePotential XSS on sidebar navigation2.3 Low
- hallo welt! gmbh bluespicePotential XSS on personal menu navigation3.3 Low
- hallo welt! gmbh common user interface component, hallowelt common user interface, bluespice +2 morePotential XSS in common user interface component library4.0 Medium
- hallo welt! gmbh bluespicePotential XSS on custom menu navigation2.3 Low
- brian-chappell follow me plugin, follow me plugin project me plugin +1 moreFollow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
wasmtimeOSS-FuzzUNKNOWN WRITE in instantiate_many::_::run::hb58bf0fc7b8817e5No score- phoenix contact config+, pc worx, phoenixcontact automationworx software suite +1 more +3 moreBuffer Overflow in PHOENIX CONTACT Automationworx Software Suite7.8 High
- phoenixcontact automationworx software suite, phoenix contact config+, pc worx +1 more +3 moreOut-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite7.8 High
- phoenix contact fl mguard centerport, fl mguard centerport vpn-1000, fl mguard core tx +59 more +61 moreDenial-of-Service vulnerability in PHOENIX CONTACT mGuard product family7.5 High
postgresql-11Debianpostgresql-11 - bugfix updateNo score- mozilla firefox, firefox esr, thunderbird +2 moreService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 Medium
- apache airflowApache Airflow: Open redirect during login6.1 Medium
- jenkins associated files, jenkins project associated files plugin +1 moreJenkins Associated Files Plugin vulnerable to cross-site scripting (XSS)5.4 Medium
- jenkins japex, jenkins project japex plugin +1 moreXXE vulnerability in Jenkins JAPEX Plugin9.8 Critical
- jenkins cluster statistics, jenkins project cluster statistics plugin +1 moreJenkins Cluster Statistics Plugin Missing Authorization vulnerability4.3 Medium
- jenkins cluster statistics, jenkins project cluster statistics plugin +1 moreCross-Site Request Forgery in Jenkins Cluster Statistics Plugin4.3 Medium
- jenkins project osf builder suite : : xml linter plugin, jenkins osf builder suite \ +1 moreXXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin9.8 Critical
- jenkins sourcemonitor, jenkins project sourcemonitor plugin +1 moreXXE vulnerability on agents in Jenkins SourceMonitor Plugin9.8 Critical
- jenkins cccc, jenkins project cccc plugin +1 moreXML External Entity Reference in Jenkins CCCC Plugin9.8 Critical
- jenkins delete log, jenkins project delete log plugin +1 moreMissing permission check in Jenkins Delete log Plugin4.3 Medium
- jenkins delete log, jenkins project delete log plugin +1 moreCross-Site Request Forgery in Jenkins Delete log Plugin3.5 Low
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 morePlaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin6.5 Medium
- Show moreLoading…