CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- codepeople appointment booking calendar, appointment booking calendar (wordpress plugin) +1 moreWordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability4.3 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 moreWordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerability6.5 Medium
- webartesanal mantenimiento web, carlos doral mantenimiento web (wordpress plugin) +1 moreWordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)6.1 Medium
- dwbooster appointment hour booking, codepeople appointment hour booking (wordpress plugin) +1 moreWordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability4.3 Medium
- yikesinc custom product tabs for woocommerce, yikes inc. custom product tabs for woocommerce (wordpress plugin) +1 moreWordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- constantcontact creative mail, constant contact creative mail (wordpress plugin) +1 moreWordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- booster for woocommerce, pluggabl llc booster for woocommerce (wordpress plugin) +1 moreWordPress Booster for WooCommerce plugin <= 5.6.6 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- constantcontact creative mail, constant contact creative mail (wordpress plugin) +1 moreWordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability6.5 Medium
- collne inc. welcart e-commerce (wordpress plugin), welcart e-commerce +1 moreWordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability7.5 High
- wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 moreWordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability4.3 Medium
- ibm openbmc, power system ac922 \(8335-gtg\) firmware, power system ac922 \(8335-gth\) firmware +1 more +3 moreIBM OpenBMC denial of service4.9 Medium
- jetbrains hubIn JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular...3.5 Low
fluent-bitOSS-FuzzHeap-use-after-free in template_executeNo scorelibredwgOSS-FuzzHeap-buffer-overflow in json_common_entity_dataNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in bytes_copy_rectangle_zero_paddingNo scoreflacOSS-FuzzStack-buffer-overflow in FLAC::Decoder::FuzzerDecoder::metadata_callbackNo scorelibredwgOSS-FuzzHeap-double-free in dwg_freeNo score- gnu bash, redhat enterprise linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the bash package, where a heap-buffer overflow can occur in valid...7.8 High
- karmasis informatics infraskope siem+, karmasis infraskope siem\+ +1 moreUnauthorized modification in Karmasis Informatics Infraskope SIEM+6.5 Medium
- karmasis informatics infraskope siem+, karmasis infraskope siem\+ +1 moreUnauthorized modification in Karmasis Informatics Infraskope SIEM+8.2 High
- drachtio drachtio-serverdrachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.9.8 Critical
- drachtio drachtio-serverIn drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.5.5 Medium
- nxp i.mx 6 firmware, i.mx 6dual firmware, i.mx 6duallite firmware +20 more +22 moreAn information-disclosure vulnerability exists on select NXP devices when configured in Serial...5.3 Medium
- linaro lavaIn Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be...9.8 Critical
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page...7.2 High
- linaro lava, debian linux +1 moreIn Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials...6.5 Medium
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f...7.2 High
- dlink dir-3060 firmwareD-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.9.8 Critical
- wireWire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages...4.7 Medium
- intelbras sg 2404 mr firmware, sg 2404 poe firmware +1 moreINTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create...7.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the...7.2 High
- google tensorflowInvalid char to bool conversion when printing a tensor in Tensorflow4.8 Medium
- google tensorflowSegfault in `CompositeTensorVariantToComponents` in Tensorflow4.8 Medium
- google tensorflow`CHECK` fail via inputs in `PyFunc` in Tensorflow4.8 Medium
- google tensorflowOverflow in `ResizeNearestNeighborGrad` in Tensorflow4.8 Medium
- google tensorflow`CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow4.8 Medium
- google tensorflowFractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow7.1 High
- google tensorflow`CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow4.8 Medium
- google tensorflow`CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow4.8 Medium
- google tensorflow`FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow4.8 Medium
- google tensorflow`tf.raw_ops.Mfcc` crashes in Tensorflow4.8 Medium
- google tensorflow`MirrorPadGrad` heap out of bounds read in Tensorflow4.8 Medium
- google tensorflowBuffer overflow in `CONV_3D_TRANSPOSE` on TFLite7.1 High
- google tensorflow`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow4.8 Medium
- google tensorflowSegfault in `tf.raw_ops.TensorListConcat` in Tensorflow4.8 Medium
- Show moreLoading…