CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- google tensorflow`CHECK` fail in `BCast` overflow in Tensorflow4.8 Medium
- google tensorflowSegfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow5.5 Medium
- google tensorflowUnckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow4.8 Medium
- google tensorflowOverflow in `tf.keras.losses.poisson` in Tensorflow4.8 Medium
- google tensorflowOverflow in `ImageProjectiveTransformV2` in Tensorflow4.8 Medium
- google tensorflowOverflow in `FusedResizeAndPadConv2D` in Tensorflow4.8 Medium
- google tensorflowSeg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow4.8 Medium
- google tensorflowOut of bounds segmentation fault due to unequal op inputs in Tensorflow6.8 Medium
- google tensorflowThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow6.8 Medium
- freedesktop xdg-utilsWhen xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can...7.4 High
- free5gcFree5gc vulnerable to uncontrolled resource consumption7.5 High
- iobit iotransferIOBit IOTransfer V4 is vulnerable to Unquoted Service Path.7.8 High
- carel boss mini firmwareCarel Boss Mini 1.5.0 has Improper Access Control.9.9 Critical
- nvidia cuda toolkitNVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where...4.4 Medium
- installbuilderInstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the...7.3 High
- nvidia gpu display driver, cloud gaming guest, cloud gaming (guest driver) +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...7.8 High
- nvidia gpu display driver, cloud gaming guest, cloud gaming (guest driver) +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...6.1 Medium
- maradnsAn issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended...7.5 High
- elastic kibanaIt was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using...5.4 Medium
- ruby-lang cgi, ruby, fedoraproject fedora +2 moreHTTP response splitting in CGI8.8 High
- seppmailThe SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user...6.1 Medium
- silabs.com ember znet, silabs gecko software development kit, zigbee emberznet +2 moreMalformed Zigbee packet with invalid destination address causes Assert5.7 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.8 High
- zoom rooms, zoom video communications inc rooms installer for windows +1 moreLocal Privilege Escalation in Zoom Rooms Installer for Windows8.8 High
- zoom meetings, rooms, zoom video communications inc client for meetings for windows (32-bit) +2 more +4 moreDLL injection in Zoom Windows Clients3.3 Low
- zoom meetings, zoom video communications inc client for meetings installer for macos (standard and for it admin) +1 moreLocal Privilege Escalation in Zoom Client Installer for macOS8.8 High
- college management system v1.0, college management system project management system +1 moreCollege Management System v1.0 - Authenticated remote code execution7.2 High
- d-link g integrated access device4, dlink g integrated access device4 firmware +1 moreD-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.7.5 High
- glpi reports plugin for glpi, glpi-project reports +1 moreGLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS)6.1 Medium
- college management system v1.0, college management system project management system +1 moreCollege Management System v1.0 - SQL Injection (SQLi)9.8 Critical
- webvendomeWebvendome - webvendome Internal Server IP Disclosure5.3 Medium
- elsight halo, halo firmware +1 moreElsight – Elsight Halo Remote Code Execution (RCE)9.8 Critical
- webvendomewebvendome - webvendome SQL Injection9.8 Critical
- automattic crowdsignal dashboard, automattic, inc. crowdsignal dashboard – polls, surveys & more (wordpress plugin) +1 moreWordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability6.3 Medium
- storeapps news announcement scroll, news announcement scroll (wordpress plugin) +1 moreWordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- chameleon project chameleon, fahad mahmood chameleon (wordpress plugin) +1 moreWordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability7.1 High
- ezoic, ezoic inc. (wordpress plugin) +1 moreWordPress Ezoic plugin <= 2.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- ezoic, ezoic inc. (wordpress plugin) +1 moreWordPress Ezoic plugin <= 2.8.8 - Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability6.1 Medium
- anthologize project anthologize, one week | one tool anthologize (wordpress plugin) +1 moreWordPress Anthologize plugin <= 0.8.0 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- metagauss profilegrid, profilegrid (wordpress plugin) +1 moreWordPress ProfileGrid plugin <= 5.1.6 - Auth. CSV Injection vulnerability6.8 Medium
- muffingroup betheme, betheme (wordpress theme) +1 moreWordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability6.3 Medium
- webpsilon ultimate tablesWordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability6.1 Medium
- thriveweb wooswipe woocommerce gallery, thrive website design wooswipe woocommerce gallery (wordpress plugin) +1 moreWordPress WooSwipe WooCommerce Gallery plugin <= 2.0.1 - Auth. Broken Access Control vulnerability5.4 Medium
- cyberchimps ifeature slider, cyberchimps inc. ifeature slider (wordpress plugin) +1 moreWordPress iFeature Slider plugin <= 1.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities5.4 Medium
- Show moreLoading…