Archive
November 2022
Vulnerabilities first published in this month (UTC), newest first.
900 results · Clear filters · Feed
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 5.3
A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, rem…
-
Medium 5.3
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow a…
-
Medium 5.8
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multip…
-
Medium 5.8
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multip…
-
Medium 5.8
A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance …
-
Medium 6.3
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an …
-
Medium 6.3
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an …
-
Medium 6.0
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an auth…
-
Medium 5.8
A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an …
-
Medium 6.5
A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authentica…
-
Medium 6.4
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive…
-
Medium —
Read the Docs vulnerable to Cross-Site Scripting (XSS)
### Impact This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain (readthedocs[.]org/readthedocs[.]com) by exploiting a vulnerability in the code that serves downloadable content from a project. Exploiting t…
-
Medium 5.4
Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family
Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
-
Medium 4.3
SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 al…
-
Medium 4.3
SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 a…
-
Medium 5.0
Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.
-
Medium 6.5CVE-2022-38121 Public exploit
POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials
UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.
-
Medium 6.5CVE-2022-38120 Public exploit
POWERCOM CO., LTD. UPSMON PRO - Path Traversal
UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.
-
Medium 6.5
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user w…
-
Medium 6.1
dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using…
-
Medium 5.9
Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration
Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when the allocator is configured to give WebAssembly instances a maximum of zero pages of memory. In this c…
-
Medium 5.3
Some Deeplearning4J packages use unclaimed s3 bucket in tests and examples
Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples…
-
Medium 6.5
Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obs…
-
Medium 5.4
An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to…
-
Medium 4.2
The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config u…
-
Medium 6.1
mm-wiki is vulnerable to Cross-Site Scripting (XSS)
mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).
-
Medium 5.4
WordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in James Lao's Simple Video Embedder plugin <= 2.2 on WordPress.
-
Medium 4.3
A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A…
-
Medium 6.5
A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter3…
-
Medium 4.9
A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A…
-
Medium 6.5
A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.…
-
Medium 6.5
A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. …