CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- mitsubishi electric corporation gx works3Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gx works3Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gx works3, motion control setting(gx works3 related software) +1 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3...6.8 Medium
- mitsubishi electric corporation gt designer3 version1 (got2000), gx works3, mt works2 +2 moreUse of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 all versions allows an...5.6 Medium
- mitsubishi electric corporation gx works3, mx opc ua module configurator-r +1 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 all...8.6 High
tumblerMageiaUpdated tumbler packages fix security vulnerabilityNo scoreopenscOSS-FuzzStack-buffer-overflow in msc_zero_objectNo score- pilz pasvisu, pmi v5xx (265507 + 265512), pmi v7xx (266704 + 266707) +8 more +10 morePILZ: PASvisu and PMI affected by ZipSlip7.5 High
- pilz pas4000, pas 4000, pascal +4 more +6 morePILZ: Multiple products affected by ZipSlip5.5 Medium
- mitsubishi electric got2000 series gt23 model, got2000 series gt25 model, got2000 series gt27 model +3 more +5 moreDenial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series5.3 Medium
- knime analytics platformOpening workflows from untrusted resources may override arbitrary file system contents5.5 Medium
- knime serverUploading workflows to KNIME Server may override arbitrary file system contents7.1 High
- leadshop, qmpaas qmpaas/leadshop +1 moreExposed Dangerous Method or Function in qmpaas/leadshop8.6 High
- rickxy stock management system, stock management system project management system +1 morerickxy Stock Management System cross-site request forgery4.3 Medium
- rickxy stock management system, stock management system project management system +1 morerickxy Stock Management System processlogin.php cross site scripting4.3 Medium
- rickxy stock management system, stock management system project management system +1 morerickxy Stock Management System processlogin.php sql injection7.3 High
- apache dolphinschedulerApache DolphinScheduler config file read by task risk7.5 High
- wger, wger-project wger-project/wger +1 moreImproper Restriction of Excessive Authentication Attempts in wger-project/wger7.8 High
- solarwinds engineer's toolset, engineer\'s toolset +1 moreUnprotected Transport of Credentials (HSTS) Vulnerability5.3 Medium
sweetalert2npmsweetalert2 v8.19.1 and above contains hidden functionalityNo scoresweetalert2npmsweetalert2 v9.17.4 and above contains hidden functionalityNo scoresweetalert2npmsweetalert2 v10.16.10 and above contains hidden functionalityNo scoresweetalert2npmsweetalert2 v11.4.9 and above contains hidden functionalityNo score- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreInfo Leak in l2cap_core in the Linux Kernel8.0 High
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreInfo Leak in l2cap_core in the Linux Kernel5.1 Medium
librawspeedOSS-FuzzUse-of-uninitialized-value in rawspeed::RawImageData::checkRowIsInitializedNo scorelibredwgOSS-FuzzHeap-buffer-overflow in dwg_json_LTYPENo scoreghostscriptOSS-FuzzHeap-buffer-overflow in sputsNo scoremimalloccrates.ioMimalloc Can Allocate Memory with Bad Alignment5.5 Mediumcontainerized-data-importeropenSUSESecurity update for containerized-data-importerNo scorextrabackupopenSUSESecurity update for xtrabackupNo score- botan project botanCVE-2022-43705 affecting package botan2 2.14.0-29.1 Critical
- mattermostAuthenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server3.1 Low
- mattermostAuthenticated user could send multiple requests containing a large Auto Responder Message payload and can crash a Mattermost server4.3 Medium
- mattermost, mattermost playbooks plugin +1 moreAuthenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server4.3 Medium
- systemd project systemd, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a...5.5 Medium
- iterm2iTerm2 before 3.4.18 mishandles a DECRQSS response.9.8 Critical
- h2database h2Password exposure in H2 Database8.4 High
- qpress project qpress, fedoraproject fedora +1 moreqpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup...5.3 Medium
- caehealthcare learningspace enterpriseCAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related...5.4 Medium
- apache dolphinschedulerApache DolphinScheduler prior to 2.0.5 have command execution vulnerability9.8 Critical
- eyoucmsA cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0...5.4 Medium
- jizhicmsJizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins...8.8 High
- eyunjing yjcmsAn issue in the /index/user/user_edit.html component of YJCMS v1.0.9 allows unauthenticated...9.8 Critical
- moodle, fedoraproject fedora +1 moreMoodle stored-XSS vulnerability in some "social" user profile fields5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle reflected cross-site scripting vulnerability in policy tool6.1 Medium
- moodle, fedoraproject fedora +1 moreCross-Site Request Forgery in Moodle5.4 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 moreA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.1 allows an...8.8 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master...6.5 Medium
- sanitization management system project management systemSanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user...7.2 High
- Show moreLoading…