Skip to content
OpenAdvisories

Archive

November 2022

Vulnerabilities first published in this month (UTC), newest first.

900 results · Clear filters · Feed

  • Medium 5.5

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPad…

  • Medium 5.5

    The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, …

  • Medium 6.7

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13.…

  • Medium 5.5

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS…

  • Medium 5.9

    This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged…

  • Medium 6.7

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, ma…

  • Medium 6.5

    Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  • Medium 6.4

    A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …

  • Medium 6.5

    A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16…

  • Medium 5.5

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, …

  • Medium 6.5

    Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  • Medium 6.5

    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a…

  • Medium 4.3

    A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in ma…

  • Medium 6.1

    A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execut…

  • Medium 4.8

    Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the c…

  • Medium 4.8

    A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows atta…

  • Medium 4.8

    A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to …

  • Medium 4.9

    Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.

  • Medium 6.1

    A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers…

  • Medium 4.8

    A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows a…