CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- jeecg bootJeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys...5.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library9.1 Critical
- wbce cmsA cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4...5.4 Medium
- wbce cmsAn arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows...7.2 High
- wbce cmsA cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows...5.4 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows...5.4 Medium
- wbce cmsA cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4...5.4 Medium
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- web based quiz system project based quiz systemWeb Based Quiz System v1.0 transmits user passwords in plaintext during the authentication...7.5 High
- spatie browsershotBrowsershot 3.57.3 - Server Side XSS to LFR via HTML8.2 High
- spatie browsershotBrowsershot 3.57.2 - Server Side XSS to LFR via HTML8.2 High
- 4ra1n super-xray, super xray project xray +1 moreDeserialization Vulnerability by yaml config input in super-xray7.3 High
- joniles mpxjTemporary File Information Disclosure Vulnerability3.3 Low
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk Android broadcast incorrect permission handling3.3 Low
- elated-themes frappeFrappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This...6.5 Medium
- spatie browsershotBrowsershot 3.57.2 - Server Side XSS to LFR via URL8.2 High
- uasoft badasoBadaso vulnerable to Remote Code Execution (RCE)9.8 Critical
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.3 High
- google chrome, chromium gpu, microsoft edge +1 more +3 moreHeap buffer overflow in GPU9.6 Critical
- eyoom buildereyoom builder Remote Code Execution Vulnerability7.2 High
- webcash serp server 2.0ERP solution Remote Code Execution Vulnerability8.1 High
- etm-s ondiskplayeragentOndiskPlayer Remote Code Execution Vulnerability7.8 High
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System food.php query cross site scripting3.5 Low
- belden hirschmann bat-c2 firmwareThe web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection....8.8 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +1 more +3 moreMissing length validation of user displayname in nextcloud server3.5 Low
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreCleartext Transmission of Sensitive Information in user_oidc4.3 Medium
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreStored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidc3.5 Low
- nextcloud desktop, kiteworks security-advisories +1 morenextcloudcmd incorrectly trusts bad TLS certificates3.9 Low
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site scripting (XSS) in Nextcloud Desktop Client4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site scripting (XSS) in Nextcloud Desktop Client4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site Scripting (XSS) in Nexcloud Desktop Client4.6 Medium
- basercmsCross-site scripting vulnerability in BaserCMS4.6 Medium
- phpgurukul blood donor management system project blood donor management systemPHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard...8.1 High
- windriver vxworks, siemens siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +26 more +28 moreAn issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted...7.5 High
- f-secure elements endpoint protectionIn F?Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022...7.5 High
- pyrocmsPyroCMS vulnerable to stored Cross Site Scripting9.0 Critical
- orchardcore orchard cmsOrchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low...9.0 Critical
- epson tm-c3500 firmware, tm-c3510 firmware, tm-c3520 firmware +6 more +8 moreThe WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500...9.1 Critical
- octopus serverIn affected versions of Octopus Server it is possible for target discovery to print certain...7.5 High
- prasathmani tiny file managerTiny File Manager version 2.4.8 allows an unauthenticated remote attacker to execute arbitrary...8.8 High
- microweberMicroweber vulnerable to cross-site scripting (XSS)6.1 Medium
- mitsubishi electric corporation gx works3Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3...6.8 Medium
- mitsubishi electric corporation gx developer, gx works2, gx works3 +2 moreCleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric...3.7 Low
- mitsubishi electric corporation gx works3Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1...7.5 High
- mitsubishi electric corporation gx works3, motion control setting(gx works3 related software) +1 moreUse of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...9.1 Critical
- mitsubishi electric corporation gt designer3 version1 (got2000), gx works3, motion control setting(gx works3 related software) +1 more +3 moreUse of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- Show moreLoading…