CVEs published November 12, 2022
11 CVEs were published on November 12, 2022: 3 critical, 4 high.
- Published
- 11
- Critical
- 3
- High
- 4
- Medium
- 1
- Low
- 1
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- gnuboard5
- 1
Critical 3
- CVE-2022-38651A security filter misconfiguration exists in VMware Hyperic Server 5.8.6.
- CVE-2022-43671Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.
- CVE-2022-43672Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a diffe
High 4
- CVE-2022-40773Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation.
- CVE-2022-41339In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation.
- CVE-2022-45188Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file.
- CVE-2022-45196Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the sam
Medium, low and unrated 4
- CVE-2022-38650A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6.
- CVE-2022-38652A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6.
- CVE-2022-3963gnuboard5 FAQ Key ID faq.php cross site scriptinggnuboard5
- CVE-2022-45195SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere w