Archive

8 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /8 December 2022 →

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

Critical 9.8

CVE-2022-27510

Unauthorized access to Gateway user capabilities

Unauthorized access to Gateway user capabilities

Citrix Citrix Gateway, Citrix ADC Network devices

Nov 8, 2022
Critical 9.8

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earl…

NEC CLUSTERPRO X

Nov 8, 2022
Critical 9.8

CVE-2022-34823

Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier…

NEC CLUSTERPRO X

Nov 8, 2022
Critical 9.8

CVE-2022-34822

Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier,…

NEC CLUSTERPRO X

Nov 8, 2022
Critical 9.8

CVE-2022-34824

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Wi…

NEC CLUSTERPRO X

Nov 8, 2022
Critical 9.8

CVE-2022-33321

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connectio…

Mitsubishi Electric Air Conditioning MSZ-FZ40/56/63/71/80/9020S Air Conditioning MSZ-VXV40/56/63/71/8022S Air Conditioning MSZ-FZV40/56/63/71/80/9020S ICS / OT

Nov 8, 2022
Critical 9.8

CVE-2022-39328

Grafana vulnerable to race condition allowing privilege escalation

Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint …

Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go

Nov 8, 2022
Critical 9.8

CVE-2022-31199 Exploited · Ransomware Public exploit EPSS 36%

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting bo…

Nov 8, 2022
KEV Jul 11, 2023
Critical 9.8

CVE-2022-44457

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix …

Siemens Mendix SAML (Mendix 8 compatible) Mendix SAML (Mendix 7 compatible) Mendix SAML (Mendix 9 compatible, Upgrade Track) ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-41203

In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated att…

SAP SAP BusinessObjects Business Intelligence Platform (Central Management Server)

Nov 8, 2022
Critical 9.8

CVE-2022-37015

Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation…

Nov 8, 2022
Critical 9.9

CVE-2022-43546

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens SICAM P850 SICAM P855 POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43545

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens SICAM P850 SICAM P855 POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43439

A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER …

Siemens SICAM T SICAM P855 SICAM P850 ICS / OT

Nov 8, 2022