CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
bitlyshortenerPyPIPackage discontinued because Bitly lowered the free quotaNo scorephpxmlrpc/phpxmlrpcPackagistcode injection in phpxmlrpc/phpxmlrpcNo score- ghostghost vulnerable to unauthorized newsletter modification via improper access controls9.6 Critical
- squirrly seo plugin by squirrly seo, seo plugin by squirrly seo (wordpress plugin) +1 moreWordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload7.6 High
- freeamigos manage notification e-mails, virgial berveling manage notification e-mails (wordpress plugin) +1 moreWordPress Manage Notification E-mails Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- theme and plugin translation for polylang project and plugin translation for polylang, marcinkazmierski theme and plugin translation for polylang (ttfp) +1 moreTheme and plugin translation for Polylang <= 3.2.16 - Missing Authorization6.5 Medium
- ibm maximo mobile, maximo application suite +1 moreIBM Maximo information disclosure6.2 Medium
- velneo vclientVelneo vClient improper authentication8.7 High
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)4.9 Medium
- unknown wp user merger, wp user merger project user merger +1 moreWP User Merger < 1.5.3 - Admin+ SQLi via ID8.8 High
- showing url in qr code project url in qr code, unknown showing url in qr code +1 moreShowing URL in QR Code <= 0.0.1 - Stored XSS via CSRF6.1 Medium
- beautiful-cookie-banner beautiful cookie consent bannerBeautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS4.8 Medium
- analytics for wp project for wp, unknown analytics for wp +1 moreAnalytics for WP <= 1.5.1 - Admin+ Stored XSS4.8 Medium
- awesomesupport awesome supportAwesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download6.5 Medium
- piwebsolution export customers list csv for woocommerce, unknown export customers list csv for woocommerce, wordpress users csv, export guest customer list +1 moreExport customers list CSV for WooCommerce < 2.0.69 - CSV Injection9.8 Critical
- google forms project forms, unknown google forms +1 moreGoogle Forms <= 0.95 - Admin+ Stored XSS4.8 Medium
- tipsandtricks-hq donations via paypalDonations via PayPal < 1.9.9 - Admin+ Stored XSS4.8 Medium
- unknown wp user merger, wp user merger project user merger +1 moreWP User Merger < 1.5.3 - Admin+ SQLi via wpsu_user_id8.8 High
- thematosoup fancier author box, unknown fancier author box by thematosoup +1 moreFancier Author Box by ThematoSoup <= 1.4 - Admin+ Stored XSS4.8 Medium
- unknown wp admin ui customize, wp admin ui customize project admin ui customize +1 moreWP Admin UI Customize < 1.5.13 - Admin+ Stored XSS4.8 Medium
- unknown wp user merger, wp user merger project user merger +1 moreWP User Merger < 1.5.3 - Admin+ SQLi via user_id8.8 High
- themehigh checkout field editor (checkout manager) for woocommerce, checkout field editor for woocommerce +1 moreCheckout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection7.2 High
- unknown video thumbnails, video thumbnails project thumbnails +1 moreVideo Thumbnails <= 2.12.3 - Admin+ Stored XSS4.8 Medium
- salat times project times, unknown salat times +1 moreSalat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- find and replace all project and replace all, unknown find and replace all +1 moreFind and Replace All < 1.3 - Reflected Cross Site Scripting6.1 Medium
- find and replace all project and replace all, unknown find and replace all +1 moreFind and Replace All <= 1.3 - Arbitrary Replacement via CSRF4.3 Medium
- jeeng push notifications project push notifications, unknown jeeng push notifications +1 moreJeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- recaptcha project recaptchareCAPTCHA <= 1.6 - Admin+ Stored XSS4.8 Medium
- link software llc html formsHTML Forms < 1.3.25 - Admin+ SQLi7.2 High
- metagauss download pluginDownload Plugin < 2.0.0 - Subscriber+ Website Download4.3 Medium
- ujsoftware owm weatherOWM Weather < 5.6.9 - Contributor+ SQLi8.8 High
- unknown wpsmartcontractsWPSmartContracts < 1.3.12 - Author+ SQLi8.8 High
- image hover effects css3 project hover effects css3, unknown image hover effects css3 +1 moreImage Hover Effects Css3 <= 4.5 - Admin+ Stored XSS4.8 Medium
mbedtlsOSS-FuzzHeap-use-after-free in mbedtls_pkcs7_freeNo score- acer aspire a115-21, aspire a315-22, aspire a315-22g +7 more +9 moreAcer Aspire BIOS vulnerability8.1 High
- callback cbfs filterA null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer...6.2 Medium
- callback cbfs filterA null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of...6.2 Medium
- callback cbfs filterA null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of...6.2 Medium
- openedx xblock-drag-and-drop-v2Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields8.4 High
- gnu emacs, debian linux, fedoraproject fedora +2 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...7.8 High
- fusionauthFusionAuth vulnerable to directory traversal attack7.5 High
- sinatra, debian linux +1 moreSinatra vulnerable to Reflected File Download attack8.8 High
- web-based student clearance system project student clearance systemWeb-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- web-based student clearance system project student clearance systemWeb-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- web-based student clearance system project student clearance systemWeb-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- sanitization management system project management systemA cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows...6.1 Medium
- bosscmsBosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function...6.5 Medium
- online tours \& travels management system project tours \& travels management systemOnline Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via...9.8 Critical
- purchase order management system project order management systemPurchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order...9.8 Critical
- poultry farm management system project farm management systemPoultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter...9.8 Critical
- Show moreLoading…