Archive

9 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /9 December 2022 →

All Critical High Medium Low Exploited only Public exploit

61 results · Clear filters · Feed

Medium 6.5

CVE-2022-41097

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 9, 2022
Medium 5.8

CVE-2022-41064

.NET Framework Information Disclosure Vulnerability

.NET Framework Information Disclosure Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.8 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 NuGet

Nov 9, 2022
Medium 4.6

CVE-2022-41099 Public exploit

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 1607 Windows

Nov 9, 2022
Medium 4.4

CVE-2022-41066

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Microsoft Microsoft Dynamics NAV 2018 Dynamics 365 Business Central Spring 2019 Update Microsoft Dynamics 365 Business Central 2022 Release Wave 2

Nov 9, 2022
Medium 5.9

CVE-2022-41116

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Microsoft Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Service Pack 1 (Server Core installation) Windows 7 Windows

Nov 9, 2022
Medium 5.5

CVE-2022-41098

Windows GDI+ Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 9, 2022
Medium 5.5

CVE-2022-41105

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Nov 9, 2022
Medium 5.4

CVE-2022-41091 Exploited · Ransomware

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 9, 2022
KEV Nov 8, 2022
Medium 6.4

CVE-2022-41086

Windows Group Policy Elevation of Privilege Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 9, 2022
Medium 6.5

CVE-2022-41122

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Nov 9, 2022
Medium 5.5

CVE-2022-41104

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Nov 9, 2022
Medium 5.5

CVE-2022-41103

Microsoft Word Information Disclosure Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Nov 9, 2022
Medium 5.5

CVE-2022-41055

Windows Human Interface Device Information Disclosure Vulnerability

Windows Human Interface Device Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 9, 2022
Medium 5.9

CVE-2022-42964

Exponential ReDoS in pymatgen leads to denial of service

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method

pymatgen pymatgen pymatgen pymatgen Debian Ubuntu PyPI

Nov 9, 2022
Medium 5.9

CVE-2022-42966

Exponential ReDoS in cleo leads to denial of service

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method

Cleo cleo cleo python-cleo Ubuntu PyPI

Nov 9, 2022
Medium 6.1

CVE-2022-43320

FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

feehi/cms Packagist

Nov 9, 2022
Medium 6.1

CVE-2022-43118

A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or …

Nov 9, 2022
Medium 6.1

CVE-2022-43119

A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts …

Nov 9, 2022
Medium 6.1

CVE-2022-43321

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common…

Nov 9, 2022
Medium 6.1

CVE-2022-43120

Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field.

intelliants/subrion Packagist

Nov 9, 2022
Medium 6.1

CVE-2022-43121

Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field.

intelliants/subrion Packagist

Nov 9, 2022