CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- 4ra1n super-xray, super xray project xray +1 morePrivilege Escalation Vulnerability by wrong chmod param6.4 Medium
- sourcegraphIncorrect default permissions found in Sourcegraph9.0 Critical
- sourcegraphSourcegraph vulnerable to Comand Injection via gitserver7.9 High
- teacher record management system project record management systemA cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0...4.8 Medium
- mitel micollabThe web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated...9.8 Critical
- mitel mivoice connectThe Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an...6.8 Medium
- quarkus, redhat build of quarkus +1 moreCode injection in quarkus dev ui config editor9.8 Critical
- apache airflow, apache software foundation airflow hive provider, apache apache-airflow-providers-apache-hive +2 moreApache Airflow Hive Provider vulnerability (command injection via hive_cli connection)7.8 High
- tooljet, tooljet tooljet/tooljet +1 moreImproper Validation of Specified Quantity in Input in tooljet/tooljet6.5 Medium
- apache airflow, apache software foundation airflow spark provider, apache apache-airflow-providers-apache-spark +2 moreApache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files5.5 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreA use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in...7.8 High
- parallels remote application serverThe Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header...8.1 High
- ndk-design ndkadvancedcustomizationfieldsndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery ...9.1 Critical
- mitel mivoice connectA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0...6.8 Medium
- zyxel lte3301-m209, lte3301-m209 firmware +1 moreA flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote...9.8 Critical
- apache airflow, apache software foundation airlfow pig provider, apache apache-airflow-providers-apache-pig +2 moreApache Airlfow Pig Provider RCE9.8 Critical
- zte zxa10 c300m firmware, zxa10 c350m firmware +1 moreThere is an access control vulnerability in some ZTE PON OLT products. Due to improper access...9.8 Critical
- zte mf286r firmwareThere is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on...6.5 Medium
- zte mf286r firmwareThere is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input...8.8 High
- apache airflow, apache software foundation airflow pinot provider, apache apache-airflow-providers-apache-pinot +2 moreApache Airflow Pinot provider allowed Command Injection9.8 Critical
- maarch rmThere is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing...5.3 Medium
- maarch rmAn authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of...6.5 Medium
- schneider electric legacy modicon quantum/premium, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +50 more +52 moreA CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial...7.5 High
- libarchive, debian linux, fedoraproject fedora +1 more +3 moreIn libarchive 3.6.1, the software does not check for an error after calling calloc function that...9.8 Critical
- fusiondirectoryFusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php...9.6 Critical
- fusiondirectoryFusiondirectory 1.3 suffers from Improper Session Handling.9.8 Critical
- insyde kernelAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow...7.8 High
- microweberAccount Takeover Through Password Reset Poisoning8.8 High
- moxa aig-300 system image, da-662c-16-lx (glb) system image, uc-2100 system image +74 more +76 moreUC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12,...7.8 High
- isic.lk project isic.lkFile upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th...7.2 High
- schneider electric modicon m340 cpus, modicon m340 x80 ethernet communication modules: bmxnoe0100 (h) bmxnoe0110 (h) bmxnor0200h rtu, schneider-electric modicon m340 bmxnoe0100 firmware +13 more +15 moreA CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of...7.5 High
- heimdal project heimdalCVE-2021-44758 affecting package samba for versions less than 4.18.3-17.5 High
- silverstripe frameworkReflected XSS in querystring parameters6.1 Medium
- silverstripe frameworkStored XSS using HTMLEditor5.4 Medium
- silverstripe frameworkStored XSS using uppercase characters in HTMLEditor5.4 Medium
- silverstripeSilverstipe CMS Stored XSS in custom meta tags5.4 Medium
- silverstripe assets, framework, asset admin +2 moreSilverstripe XSS in shortcodes5.4 Medium
- silverstripe frameworkXSS via uploaded gpx file5.4 Medium
- socket engine.ioUncaught exception in engine.io7.1 High
tensorflowPyPI,tensorflow-cpuPyPI,tensorflow-gpuPyPI +2 more`CHECK` failure in `SobolSample` via missing validationNo scoretensorflowPyPI,tensorflow-cpuPyPI,tensorflow-gpuPyPI +2 more`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager modeNo score- xwiki, xwiki xwiki-platform +1 moreMissing Authorization in XWiki Platform9.6 Critical
- xwiki, xwiki xwiki-platform +1 moreExposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-server5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreExposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreImproper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui9.9 Critical
- xwiki, xwiki xwiki-platform +1 morePlaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-default6.2 Medium
- xwiki, xwiki xwiki-platform +1 moreCreation of new database tables through login form on PostgreSQL7.5 High
- xwiki, xwiki xwiki-platform +1 moreImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-user-profile-ui missing authorization to enable or disable users7.5 High
- xwiki, xwiki xwiki-platform +1 moreMissing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore4.9 Medium
- Show moreLoading…