CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- chocolatey azure-pipelines-agentInsecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all...4.3 Medium
- chocolatey python3Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the...4.3 Medium
- chocolatey cmderInsecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the...4.3 Medium
- chocolatey rubyInsecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the...4.3 Medium
- gpacGPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function...5.5 Medium
- gpacGPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the...7.8 High
- apache fineractApache Fineract allowed an authenticated user to perform remote code execution due to path traversal8.8 High
- wavlink wl-wn531g3 firmwareWAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030...7.5 High
- contec solarview compact firmwareSolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.6.1 Medium
- contec solarview compact firmwareSolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.9.8 Critical
- garage management system project management systemGarage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action...6.1 Medium
- russound xsourceplayer 777d firmwareRussound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution...9.8 Critical
- apsystems ecu-c firmwareAn access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4...8.8 High
- telosalliance omnia mpx node firmwareAn Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos...7.5 High
- online-shopping-system-advanced project online-shopping-system-advancedOnline-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- klik project klikKLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS...5.4 Medium
- klik project klikKLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS...5.4 Medium
- gpacGPAC lsr_dec.c lsr_translate_coords integer overflow6.3 Medium
- google chromeInsufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed...4.3 Medium
- google chromeUse after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker...8.8 High
- google chromeInsufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71...8.8 High
- google chromeUse after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker...8.8 High
- google chromeUse after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who...8.8 High
- google chromeInsufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a...8.8 High
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an...4.3 Medium
- google chromeInsufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0...4.3 Medium
- google chromeInsufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71...6.5 Medium
- google chromeInsufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71...4.3 Medium
- google chromeInappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed...4.3 Medium
- google chromeInsufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a...4.3 Medium
- google chromeInsufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed...4.3 Medium
- google chromeInappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a...4.3 Medium
- google chromeUse after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...8.8 High
- google chromeUse after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced...8.8 High
- google chromeUse after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced...8.8 High
- google chromeUse after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who...8.8 High
- google chromeOut of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0...8.8 High
- google chromeUse after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...8.8 High
- qemu, fedoraproject fedora +1 moreAn integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization...6.5 Medium
- line corporation client for ios, linecorp line +1 moreLINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in...7.5 High
- qemu, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreAn out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The...6.5 Medium
- d-link dnr-322l, dlink dnr-322l firmware +1 moreData Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated...8.8 High
- owncast owncast/owncast, owncast project owncast +1 moreSQL Injection in owncast/owncast8.8 High
- amasty blog proThe blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows...6.1 Medium
- churchcrmChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location...4.8 Medium
- churchcrmChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location...4.8 Medium
- cradlepoint ibr600, moxa uc-2101-lx firmware, uc-2102-lx firmware +48 more +50 moreCradlepoint IBR600 Command Injection7.1 High
- 10web photo galleryVMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service...6.1 Medium
- Show moreLoading…