CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.9.8 Critical
- tenda ac15 firmwareTenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.7.5 High
- tenda ac15 firmwareTenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..7.5 High
- tenda ac15 firmwareTenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.7.5 High
- tenda ac21 firmwareTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.7.5 High
- tenda ac21 firmwareTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.7.5 High
- tenda ac15 firmwareTenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.7.5 High
- mybbMyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.4.9 Medium
- mybbMyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially craf…6.1 Medium
- mybbMyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML via user input or stored data6.1 Medium
- beekeeperstudio beekeeper-studioA cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute...9.6 Critical
- password storage application project storage applicationSourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain...5.4 Medium
- backdropcms backdrop cmsCross-site Scripting in Backdrop CMS4.8 Medium
- 4ra1n super-xrayRemote Code Execution (RCE) vulnerability in super-xray via URL input6.5 Medium
- kiwitcms kiwitcms/kiwi, kiwi tcms +1 moreCross-site Scripting (XSS) - Stored in kiwitcms/kiwi7.1 High
- appsmith, appsmithorg appsmithorg/appsmith +1 moreServer-Side Request Forgery (SSRF) in appsmithorg/appsmith8.8 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreSQL Injection in dolibarr/dolibarr8.1 High
- ipxeiPXE TLS tls.c tls_new_ciphertext information exposure2.6 Low
- phpgurukul blood donor management systemPhpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name...4.8 Medium
- micro focus filrFilr Remote unauthenticated user enumeration for versions prior to 4.3.1.15.3 Medium
- silverstripe frameworkBlind SQL Injection via GridFieldSortableHeader8.8 High
- silverstripe frameworkURL XSS vulnerability due to outdated jquery in CMS5.4 Medium
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +1 more +3 moreBooster for WooCommerce - Checkout Files Deletion via CSRF8.1 High
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +1 more +3 moreBooster for WooCommerce - ShopManager+ Arbitrary File Download6.5 Medium
- evaluate project evaluateEvaluate <= 1.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- inkthemes ask meAsk Me < 6.8.7 - Post Deletion via CSRF4.7 Medium
- awplife event monsterEvent Monster < 1.2.1 - Admin+ SQLi7.2 High
- fluenx deepl pro api translation, unknown deepl pro api translation plugin +1 moreDeepL Pro API Translation < 1.7.5 - API Key Disclosure7.5 High
- code-atlantic popup maker, popup maker maker +1 morePopup Maker < 1.16.11 - Contributor+ Stored Cross Site Scripting4.8 Medium
- 2code wpqa builderWPQA < 5.9 - Follow/Unfollow via CSRF8.8 High
- ciphercoin contact form 7 database addonContact Form 7 Database Addon < 1.2.6.5 - CSV Injection9.8 Critical
- clevelandwebdeveloper spacerSpacer < 3.0.7 - Admin+ Stored XSS4.8 Medium
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreEasy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection9.8 Critical
- insyde kernelAn stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in...6.8 Medium
- hitachi energy microscada x sys600, microscada pro sys600 +1 moreInput Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products8.8 High
- awplife event monsterEvent Monster < 1.2.0 - Visitors Deletion via CSRF4.3 Medium
- technitium dns serverAn issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of...9.8 Critical
- technitium dns serverAn issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of...9.8 Critical
- gamerz wp-pollsWP-Polls < 2.76.0 - IP Validation Bypass5.3 Medium
- gunkastudios login block ipsLogin Block IPs <= 1.0.0 - IP Spoofing Bypass7.5 High
- my wpdb project wpdb, unknown my wpdb +1 moreMy wpdb < 2.5 - Arbitrary SQL Query via CSRF8.8 High
- fivestarplugins five star restaurant reservationsFive Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS6.1 Medium
- unknown wp user frontendWP User Frontend < 3.5.29 - Obscure Registration as Admin9.8 Critical
- optilinknetwork op-xt71000n firmwareA vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could...6.5 Medium
toropenSUSESecurity update for torNo score- Show moreLoading…