CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- withsecure f-secure policy managerWithSecure through 2022-08-10 allows attackers to cause a denial of service (issue 4 of 5).9.8 Critical
- d-link dsl-224, dlink dsl-224 firmware +1 moreDLINK - DSL-224 Post-auth RCE.9.9 Critical
- amasty blog proThe Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely....5.4 Medium
- audinate dante discovery, dante application library +1 moremDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to...7.8 High
- synthesiagame synthesiaA buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user...5.5 Medium
- proofpoint enterprise protectionProofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.4.3 Medium
- ibm partner engagement managerIBM Sterling Partner Engagement Manager information disclosure4.0 Medium
- benbodhi svg supportThe SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG...6.4 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePermalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery8.8 High
openscOSS-FuzzStack-buffer-overflow in sc_path_printNo scorekarchiveOSS-FuzzHeap-buffer-overflow in crc64_clmulNo scoreopensipsOSS-FuzzHeap-buffer-overflow in parse_content_lengthNo score- karmasis informatics infraskope siem+, karmasis infraskope siem\+ +1 moreUnauthorized modification in Karmasis Informatics Infraskope SIEM+8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 Medium
- mozilla firefoxIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 Medium
- mozilla firefoxService Workers did not detect Private Browsing Mode correctly in all cases, which could have led...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 Medium
- mozilla firefoxWhen downloading an HTML file, if the title of the page was formatted as a filename with a...7.8 High
- mozilla firefoxUsing the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 Medium
- mozilla firefoxIf an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 Medium
- apache sshd, apache software foundation mina sshd +1 moreApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Critical
- tribalsystems zenarioCross-site Scripting in Zenario5.4 Medium
- tribalsystems zenarioCross-site Scripting in Zenario5.4 Medium
- tribalsystems zenarioCross-site Scripting in Zenario5.4 Medium
- tribalsystems zenarioCross-site Scripting in Zenario5.4 Medium
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary...6.5 Medium
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of...8.8 High
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or...9.8 Critical
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in...5.3 Medium
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of...9.8 Critical
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user...9.8 Critical
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient output encoding of...6.1 Medium
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal...9.8 Critical
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management...9.8 Critical
- guitar-pro guitar proArobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory...7.5 High
- guitar-pro guitar proA cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before...6.1 Medium
- oretnom23 human resource management systemHuman Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- seacmsSeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js...9.8 Critical
- hooskAn arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows...9.8 Critical
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...9.8 Critical
- Show moreLoading…