Skip to content
OpenAdvisories

Archive

11 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /11 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

91 results · Feed

  • Medium 5.3
    CVE-2022-31772

    IBM MQ denial of service

    IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.

    IBM MQ
  • Medium 5.4
    CVE-2022-40753

    IBM InfoSphere Information Server cross-site scripting

    IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

    IBM InfoSphere Information Server
  • Medium 5.4
    CVE-2022-36776

    IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability all…

    IBM Cloud Pak for Security
  • Medium 5.4
    CVE-2022-40750

    IBM WebSphere Application Server cross-site scripting

    IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…

    IBM WebSphere Application Server
  • High 7.1
    CVE-2022-38385

    IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitiv…

    IBM Cloud Pak for Security
  • High 7.1
    CVE-2022-38387

    IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbi…

    IBM Cloud Pak for Security
  • Medium 5.5
    CVE-2022-34331

    IBM Power FW security bypass

    After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695.

    IBM Power FW
  • High 7.5
    CVE-2022-3510

    Parsing issue in protobuf message-type extension

    A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded…

    Google Protocolbuffers druid trino Debian Ubuntu Wolfi Maven
  • Medium 6.7
    CVE-2022-26028

    Uncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated…

  • Medium 6.7
    CVE-2021-33064

    Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authentica…

  • Medium 6.5
    CVE-2022-28667

    Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated …

    linux-firmware Ubuntu
  • Medium 6.7
    CVE-2022-26024

    Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before versio…

  • Low 3.3
    CVE-2022-33973

    Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow a…

    Windows
  • Medium 4.3
    CVE-2022-26047

    Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products …

    linux-firmware Ubuntu
  • Medium 6.7
    CVE-2022-36377

    Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & M…

  • Medium 6.7
    CVE-2022-36380

    Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 be…

    Windows
  • Medium 6.7
    CVE-2022-36384

    Unquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before…

    Windows
  • Medium 6.7
    CVE-2022-36400

    Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before versi…

    Windows
  • High 7.9
    CVE-2022-21198

    Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user …

  • High 8.2
    CVE-2022-26006

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • Medium 6.0
    CVE-2022-25917

    Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a …

  • Medium 5.2
    CVE-2022-36349

    Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before ver…

  • High 8.2
    CVE-2022-30542

    Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and In…

  • High 7.5
    CVE-2022-36370

    Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may…

  • High 7.0
    CVE-2022-37334

    Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before versio…

  • High 7.5
    CVE-2022-38099

    Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may a…

  • High 7.5
    CVE-2022-26124

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugge…

  • High 7.5
    CVE-2022-35276

    Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allo…

  • High 7.5
    CVE-2022-36789

    Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini…

  • High 7.7
    CVE-2022-34152

    Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may al…

  • High 7.5
    CVE-2022-32569

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may al…

  • High 7.7
    CVE-2022-21794

    Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, …

  • High 7.8
    CVE-2022-37345

    Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticate…

  • High 8.2
    CVE-2022-33176

    Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mi…

  • High 8.2
    CVE-2021-33164

    Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged use…

  • Medium 5.4
    CVE-2022-27639

    Incomplete cleanup in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privile…

  • Low 3.3
    CVE-2022-26045

    Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow…

  • Medium 6.0
    CVE-2022-26079

    Improper conditions check in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a …

  • Medium 6.0
    CVE-2022-26367

    Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow…

  • Medium 6.0
    CVE-2022-28126

    Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a …