CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- optilinknetwork op-xt71000n firmwareUnauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when...9.8 Critical
- optilinknetwork op-xt71000n firmwareOPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the...9.8 Critical
- vmware open-vm-toolsAn issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended...7.0 High
- vmware open vm toolsAn issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a...6.7 Medium
- hp inc. print products and digital sending products, hp color laserjet cm4540 mfp cc419a firmware, color laserjet cm4540 mfp cc420a firmware +2,692 more +2,694 moreCertain HP Print products and Digital Sending products may be vulnerable to potential remote code...9.8 Critical
- emerson proficy, emerson electric proficy machine edition +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434...5.9 Medium
- ibm datapower gatewayIBM DataPower Gateway session fixation3.7 Low
- all in one wp security & firewall team all-in-one security (aios) – security and firewall (wordpress plugin), tipsandtricks-hq all in one wp security \& firewall +1 moreWordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities6.5 Medium
libarchiveOSS-FuzzHeap-buffer-overflow in archive_read_has_encrypted_entriesNo score- linux kernelUse after free in IO_uring in the Linux Kernel7.8 High
- hitachi energy pcm600, 650 connectivity package, 670 connectivity package +8 more +10 moreCleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 Products7.1 High
- muffingroup bethemeWordPress Betheme premium theme <= 26.6.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- hpe netbatch-plus software, hp nonstop netbatch-plus +1 moreA vulnerability in NetBatch-Plus software allows unauthorized access to the application7.3 High
AkkaNuGetRemote code execution vulnerability in dependency System.Drawing.CommonNo score- silverstripe frameworkStored XSS in Compare Mode5.4 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at ...4.9 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at ...4.9 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id...4.9 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at ...7.5 High
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter...7.5 High
- dlink dir-823g firmwareA command injection vulnerability has been found on D-Link DIR-823G devices with firmware version...9.8 Critical
- dlink dir-882 firmwareD-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.9.8 Critical
- dlink dir-882 firmwareD-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.9.8 Critical
- dlink dir-882 firmwareD-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.9.8 Critical
- dlink dir-878 firmwareD-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control.9.8 Critical
- heimdal project heimdal, samba +1 moreCVE-2022-44640 affecting package samba for versions less than 4.18.3-19.8 Critical
- dlink dir-878 firmwareD-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.9.8 Critical
- dlink dir-823g firmwareD-Link DIR823G 1.02B05 is vulnerable to Commad Injection.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters:...9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and...9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters:...9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter...9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter...9.8 Critical
- netgear r7000p firmwareNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter...9.8 Critical
- mcafee total protectionMcAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element...7.8 High
- okfn ckanCKAN contains Improper Authentication leading to account takeover8.8 High
- billing system project systemBilling System Project v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- billing system project systemBilling System Project v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- billing system project project project system projectBilling System Project v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- sankhya omERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability...9.0 Critical
- klik-socialmediawebsite project klik-socialmediawebsiteKLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.8.8 High
- backdropcms backdropCross-site Scripting in Backdrop CMS4.8 Medium
- backdropcms backdropCross-site Scripting in Backdrop CMS4.8 Medium
- Show moreLoading…