CVEs published November 13, 2022
15 CVEs were published on November 13, 2022: 0 critical, 2 high.
- Published
- 15
- Critical
- 0
- High
- 2
- Medium
- 10
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- ffmpeg
- 2
- Pingkon HMS-PHP
- 2
- Axiomatic Bento4
- 1
- emlog
- 1
- LibTIFF
- 1
- matrix-appservice-irc
- 1
- MZ Automation libiec61850
- 1
- NagVis
- 1
- NodeBB
- 1
- NukeViet CMS · nukeviet/nukeviet
- 1
High 2
Medium, low and unrated 13
- CVE-2022-3964ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-boundsffmpeg
- CVE-2022-3965ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-boundsffmpeg
- CVE-2022-3966Ultimate Member Plugin Template class-shortcodes.php load_template pathname traversalUltimate Member Plugin
- CVE-2022-3967Vesta Control Panel sed main.sh argument injectionVesta Control Panel
- CVE-2022-3968emlog article_save.php cross site scriptingemlog
- CVE-2022-3969OpenKM FileUtils.java getFileExtension temp fileOpenKM
- CVE-2022-3970LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflowLibTIFF
- CVE-2022-3971matrix-appservice-irc PgDataStore.ts sql injectionmatrix-appservice-irc
- CVE-2022-3974Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflowAxiomatic Bento4
- CVE-2022-3975NukeViet CMS Data URL Request.php filterAttr cross site scriptingNukeViet CMS · nukeviet/nukeviet
- CVE-2022-3976MZ Automation libiec61850 MMS File Services mms_client_files.c path traversalMZ Automation libiec61850
- CVE-2022-3978NodeBB abort cross-site request forgeryNodeBB
- CVE-2022-3979NagVis CoreLogonMultisite.php checkAuthCookie type conversionNagVis