CVEs published November 11, 2022
90 CVEs were published on November 11, 2022: 2 critical, 30 high.
- Published
- 90
- Critical
- 2
- High
- 30
- Medium
- 47
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- Intel(R) XMM(TM) 7560 Modem software
- 9
- Intel(R) AMT
- 4
- IBM Cloud Pak for Security
- 3
- Intel(r) NUC Kit Wireless Adapter drivers for Windows
- 3
- eolinker goku_lite
- 2
- Intel(R) NUC Boards and Intel(R) NUC Kits
- 2
- Intel(R) Processors
- 2
- Intel(R) SPS
- 2
- Intel(R) Support Android application
- 2
- lanyulei ferry
- 2
Critical 2
High 30
- CVE-2022-38385 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perIBM Cloud Pak for Security
- CVE-2022-38387IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on theIBM Cloud Pak for Security
- CVE-2022-3510Parsing issue in protobuf message-type extensionGoogle ProtocolBuffers · com.google.protobuf:protobuf-ja… +1
- CVE-2022-21198Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enableIntel(R) Processors
- CVE-2022-26006Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of Intel(R) Processors
- CVE-2022-30542Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System Intel(R) Server Board S2600WF, Intel(R) Server System R1000…
- CVE-2022-37334Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may aIntel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards
- CVE-2022-36370Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow a privileged uIntel(R) NUC Boards and Intel(R) NUC Kits
- CVE-2022-26124Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R)Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8…
- CVE-2022-38099Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged useIntel(R) NUC 11 Compute Elements
- CVE-2022-35276Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user tIntel(R) NUC 8 Compute Elements
- CVE-2022-36789Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FIntel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Perfor…
- CVE-2022-32569Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged userIntel(R) NUC M15 Laptop Kits
- CVE-2022-34152Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may allow a privileged userIntel(R) NUC Boards, Intel(R) NUC Kits
- CVE-2022-21794Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits befIntel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC En…
- CVE-2022-37345Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentiallyIntel(R) NUC Kits
- CVE-2022-33176Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before versionIntel(R) NUC 11 Performance kits and Intel(R) NUC 11 Perfor…
- CVE-2021-33164Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged user to potentially enabIntel(R) NUCs
- CVE-2022-26513Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to poIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-33942Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalatIntel(R) DCM software
- CVE-2022-29466Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially eIntel(R) SPS
- CVE-2021-33159Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may alIntel(R) AMT
- CVE-2022-29893Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allIntel(R) AMT
- CVE-2022-27497Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allIntel(R) AMT
- CVE-2022-26845Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allIntel(R) AMT
- CVE-2022-26341Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R)Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC
- CVE-2022-3955tholum crm42 Login class.user.php sql injectiontholum crm42
- CVE-2022-41892Arches vulnerable to SQL Injectionarchesproject arches · arches
- CVE-2022-41905wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabledmar10 wsgidav · wsgidav
- CVE-2022-41906OpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF) opensearch-project notifications
Medium, low and unrated 58
- CVE-2022-31772IBM MQ denial of serviceIBM MQ
- CVE-2022-40753IBM InfoSphere Information Server cross-site scriptingIBM InfoSphere Information Server
- CVE-2022-36776IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting.IBM Cloud Pak for Security
- CVE-2022-40750IBM WebSphere Application Server cross-site scriptingIBM WebSphere Application Server
- CVE-2022-34331IBM Power FW security bypassIBM Power FW
- CVE-2022-26028Uncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially Intel(R) VTune(TM) Profiler software
- CVE-2021-33064Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentialIntel(R) System Studio
- CVE-2022-28667Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially eIntel(R) PROSet/Wireless WiFi software
- CVE-2022-26024Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may alloIntel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5…
- CVE-2022-26047Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticIntel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and…
- CVE-2022-33973Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user Intel(R) WAPI Security software for Windows 10/11
- CVE-2022-36377Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before versioIntel(R) Wireless Adapter Driver installation software for…
- CVE-2022-36380Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 maIntel(r) NUC Kit Wireless Adapter drivers for Windows
- CVE-2022-36384Unquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may alIntel(r) NUC Kit Wireless Adapter drivers for Windows
- CVE-2022-36400Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow anIntel(r) NUC Kit Wireless Adapter drivers for Windows
- CVE-2022-25917Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to poIntel(R) Server Board M50CYP Family
- CVE-2022-36349Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allIntel(R) NUC Boards and Intel(R) NUC Kits
- CVE-2022-26045Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user toIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-27639Incomplete cleanup in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentialIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-26079Improper conditions check in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to poIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-26367Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user toIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-28126Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to poIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-26369Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentialIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-28611Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to poIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-27874Improper authentication in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to poteIntel(R) XMM(TM) 7560 Modem software
- CVE-2022-29486Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenHyperscan library maintained by Intel
- CVE-2021-26251Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial Intel(R) Distribution of OpenVINO(TM) Toolkit
- CVE-2022-27233XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unautIntel(R) Quartus Prime Pro and Standard edition software
- CVE-2022-27187Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authIntel(R) Quartus Prime Standard edition software
- CVE-2022-30548Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable escalation of privilegIntel(R) Glorp software
- CVE-2022-27499Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable inIntel(R) SGX SDK software
- CVE-2022-26508Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information diIntel(R) SDP Tool
- CVE-2022-26086Uncontrolled search path element in the PresentMon software maintained by Intel(R) before version 1.7.1 may allow an authenticated user to pPresentMon software maintained by Intel
- CVE-2022-27638Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition software before versionIntel(R) Advanced Link Analyzer Pro and Standard edition
- CVE-2022-30297Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of priviIntel(R) EMA software
- CVE-2022-36367Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privileged user to potentiallIntel(R) Support Android application
- CVE-2022-30691Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an authenticated user to potIntel(R) Support Android application
- CVE-2022-29515Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privilegedIntel(R) SPS
- CVE-2022-41854Stack Overflow in SnakeyamlSnakeYaml · org.yaml:snakeyaml
- CVE-2022-3939lanyulei ferry API file.go path traversallanyulei ferry
- CVE-2022-3940lanyulei ferry task.go path traversallanyulei ferry
- CVE-2022-3941Activity Log Plugin HTTP Header neutralization for logsActivity Log Plugin
- CVE-2022-3942SourceCodester Sanitization Management System cross site scriptingSourceCodester Sanitization Management System
- CVE-2022-3943ForU CMS cms_chip.php cross site scriptingForU CMS
- CVE-2022-3944jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted uploadjerryhanjj ERP
- CVE-2022-3947eolinker goku_lite list sql injectioneolinker goku_lite
- CVE-2022-3948eolinker goku_lite getList sql injectioneolinker goku_lite
- CVE-2022-3949Sourcecodester Simple Cashiering System User Account cross site scriptingSourcecodester Simple Cashiering System
- CVE-2022-3950sanluan PublicCMS Tab dwz.min.js initLink cross site scriptingsanluan PublicCMS
- CVE-2022-3952ManyDesigns Portofino WarFileLauncher.java createTempDir temp fileManyDesigns Portofino · com.manydesigns:portofino
- CVE-2022-3956tsruban HHIMS Patient Portrait sql injectiontsruban HHIMS
- CVE-2022-3957GPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leakGPAC
- CVE-2022-3959drogon Session Hash small space of random valuesdrogon
- CVE-2022-41873Out-of-bounds read and write in BLE L2CAP modulecontiki-ng
- CVE-2022-41882Nextcloud Desktop vulnerable to code injection via malicious linknextcloud security-advisories
- CVE-2022-41904Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessionsvector-im element-ios
- CVE-2022-45193CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation.
- CVE-2022-45194CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.