CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink nr1800x firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main...9.8 Critical
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via...8.8 High
- totolink lr350 firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter...9.8 Critical
- totolink lr350 firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in...9.8 Critical
- totolink lr350 firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter...9.8 Critical
- totolink lr350 firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter...9.8 Critical
- jizhicmsJizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member...8.8 High
- apartment visitors management system project visitors management systemApartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php.9.8 Critical
- dedebiz dedecmsv6dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php.9.8 Critical
- dedebiz dedecmsv6dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.9.8 Critical
- boaBoa 0.94.14rc21 is vulnerable to SQL Injection via username.9.8 Critical
- billing system project project system projectBilling System Project v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- dedebiz dedecmsv6dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.9.1 Critical
- backdropcms backdrop cmsCross-site Scripting in Backdrop CMS4.8 Medium
- pgjdbc, postgresql jdbc driver, debian linux +2 moreTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Medium
- grails grails-spring-security-core, spring security core +1 moreGrails Spring Security Core plugin vulnerable to privilege escalation9.1 Critical
- airbnb opticaRemote Code Execution in Optica10.0 Critical
- record management system project management systemAn access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1...5.4 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass...6.5 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External...4.9 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated...7.2 High
- filecloudFileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized...7.2 High
- solarwinds security event manager, sem +1 moreInsecure Methods Vulnerability5.3 Medium
- solarwinds security event manager, sem +1 moreClient-Side Desync Vulnerability6.1 Medium
- solarwinds security event manager, sem +1 moreInformation Disclosure Vulnerability5.3 Medium
- maarch rmMaarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts...7.5 High
- insyde kernelAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow...8.2 High
- amasty blog proStored Cross-site Scripting in Amasty Blog Pro 2.10.4 and 2.10.4 creates post functionality and...5.4 Medium
- amasty blog proAmasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.5.4 Medium
- arm utgard gpu kernel driverAn Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged...7.5 High
- github enterprise serverImproper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution8.8 High
- proftpdmod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies...7.5 High
- churchdb churchinfoCartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through...8.8 High
- cms-php project cms-phpSQL Injection vulnerability in function get_user in login_manager.php in rizalafani cms-php v1.9.8 Critical
- jizhicmsAn issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin...8.8 High
- optilinknetwork op-xt71000n firmwareA vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1...6.5 Medium
- optilinknetwork op-xt71000n firmwareA vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1...8.8 High
- optilinknetwork op-xt71000n firmwareA vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1...9.8 Critical
- optilinknetwork op-xt71000n firmwareA vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1...6.5 Medium
- optilinknetwork op-xt71000n firmwareA vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1...6.5 Medium
- optilinknetwork op-xt71000n firmwareA vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1...4.3 Medium
- optilinknetwork op-xt71000n firmwareA vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version:...3.1 Low
- optilinknetwork op-xt71000n firmwareA vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3...4.3 Medium
- optilinknetwork op-xt71000n firmwareA remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N...8.8 High
- Show moreLoading…