CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to Cross-Site Request Forgery (CSRF) allowing to delete or rename tags7.4 High
- tailscaleTailscale daemon is vulnerable to information disclosure via CSRF3.8 Low
- tailscaleTailscale Windows daemon is vulnerable to RCE via CSRF9.6 Critical
- yiiframework yiiyiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input8.1 High
- @clerk fastifyFastify vulnerable to Cross-Site Request Forgery (CSRF) attack via incorrect content type4.2 Medium
- google tensorflowHeap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow4.8 Medium
- google tensorflowOut of bounds write in grappler in Tensorflow7.1 High
- hp command center, omen gaming hub, hp inc. omen gaming hub and hp command center +2 moreA potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command...9.8 Critical
- hp futuresmart 5, hp inc. futuresmart +1 moreA potential security vulnerability has been identified for certain HP multifunction printers ...9.8 Critical
- hp inc. workstation bios, hp z1 all-in-one g3 firmware, z238 microtower firmware +18 more +20 moreA potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI...8.4 High
- hp omen gaming hub, omen gaming hub sdk +1 morePotential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which...9.8 Critical
- hp elite slice firmware, elite x2 1012 g1 firmware, elite x2 1012 g2 firmware +73 more +75 moreA potential vulnerability has been identified in the system BIOS for certain HP PC products which...8.4 High
- codenotary immudbLack of proper validation in immudb5.8 Medium
- codenotary immudbimmundb has insufficient verification of data authenticity5.4 Medium
- hp jumpstartA potential security vulnerability has been identified in the HP Jumpstart software, which might...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAffected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine...7.5 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...7.0 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow...5.5 Medium
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow...5.5 Medium
- ibm i, i access client solutions +1 moreIBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local...7.2 High
- foxit reader, pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader,...8.8 High
- foxit reader, pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader,...8.8 High
- foxit reader, pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader,...8.8 High
- foxit reader, pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader,...8.8 High
- muffingroup bethemeBetheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- miele appwashMiele: Vulnerability in cloud service used by appWash8.1 High
kubevirtopenSUSESecurity update for kubevirt stackNo score- apache hamaApache Hama allows XSS and information disclosure7.5 High
- lg smart shareWhen LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking...7.8 High
- bouncycastle fips java apiGarbage collection issue in BC-FJA in Java 13 and later5.5 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Overview Page settings module of WBCE CMS v1.5...4.8 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4...4.8 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4...4.8 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4...4.8 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Show Advanced Option module of WBCE CMS v1.5.4...4.8 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Modify Page module of WBCE CMS v1.5.4 allows...4.8 Medium
- event registration application project registration applicationSourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection...7.8 High
- maggioli appalti \& contrattiAn issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user...6.5 Medium
- maggioli appalti \& contrattiAn issue was discovered in Appalti & Contratti 9.12.2. The web applications are vulnerable to a...6.1 Medium
- maggioli appalti \& contrattiAn issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local...7.5 High
- maggioli appalti \& contrattiAn issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to...9.8 Critical
- maggioli appalti \& contrattiAn issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229...8.8 High
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.9.8 Critical
- Show moreLoading…