CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability9.9 Critical
- wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 moreWordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability5.4 Medium
- wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 moreWordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 moreWordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- red lion controls crimson 3.0, crimson 3.1, crimson 3.2 +1 more +3 moreRed Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior...7.5 High
- medtronic guardian link 2 transmitter mmt-7730 firmware, guardian link 2 transmitter mmt-7731 firmware, guardian link 2 transmitter mmt-7738 firmware +26 more +28 moreMedtronic MiniMed 600 Series Pump System Communication Issue4.8 Medium
- ibm business automation workflowMultiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This...5.4 Medium
- ibm urbancode deployIBM UrbanCode Deploy information disclosure4.9 Medium
- atlassian crowd, crowd data center, crowd server +2 moreAffected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application...9.8 Critical
- atlassian bitbucket, bitbucket server, bitbucket data center +2 moreThere is a command injection vulnerability using environment variables in Bitbucket Server and...9.8 Critical
wordpressDebianwordpress - security updateNo scorejoblibDebianjoblib - security updateNo score- veritas netbackupThe Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux...7.5 High
- opcfoundation local discovery serverOPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a...7.8 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master...7.2 High
- rconfigAn arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary...8.8 High
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the...9.8 Critical
- wondercmsA cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute...6.1 Medium
- dedecmsAn arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms...6.7 Medium
- xuxueli xxl-jobXXL-JOB vulnerable to Server-Side Request Forgery (SSRF)8.8 High
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- lief-project liefLIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind6.5 Medium
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- password storage application project storage applicationA cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage...6.1 Medium
- keking kkfileviewkkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the...7.5 High
- dolibarr erp\/crmDolibarr vulnerable to privilege escalation9.8 Critical
- m5t mediatrix 4102s firmwareMediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.6.8 Medium
- scratch-wiki scratch loginThe ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure...4.8 Medium
- bund bkg professional ntripcasterBKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without...7.5 High
- keyfactor kefactor ejbcaKeyfactor EJBCA before 7.10.0 allows XSS.5.4 Medium
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the...3.3 Low
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...5.3 Medium
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- duofoxtechnologies duofox cmsDoufox 0.0.4 contains a CSRF vulnerability that can add system administrator account.8.8 High
- dreamer cms project cmsDreamer CMS 4.0.01 is vulnerable to SQL Injection.9.8 Critical
- hustojHustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.6.1 Medium
- duke-git lancetZip slip in Lancet6.3 Medium
- contec solarview compact firmwareSolarView Compact 6.00 was discovered to contain a command injection vulnerability via...9.8 Critical
- student attendance management system project attendance management system, unspecified student attendance management system +1 moreStudent Attendance Management System createClass.php cross site scripting2.4 Low
- student attendance management system project attendance management system, unspecified student attendance management system +1 moreStudent Attendance Management System createClass.php sql injection4.7 Medium
- hostel searching project searching project, unspecified hostel searching project +1 moreHostel Searching Project view-property.php sql injection6.3 Medium
- keyfactor primekey ejbcaA stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA...5.4 Medium
- lightning network daemon project network daemon, lightningnetwork lnd, btcd project btcd +2 moreWitness Block Parsing DoS Vulnerability in lnd8.2 High
- Show moreLoading…