CVEs published November 24, 2022
21 CVEs were published on November 24, 2022: 1 critical, 8 high.
- Published
- 21
- Critical
- 1
- High
- 8
- Medium
- 11
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Mitsubishi Electric GX Works3
- 4
- rickxy Stock Management System
- 3
- Mitsubishi Electric GX Works3 · Mitsubishi Electric Motion…
- 2
- Apache Software Foundation Apache DolphinScheduler · org.ap…
- 1
- KNIME Analytics Platform
- 1
- KNIME Server
- 1
- Mitsubishi Electric GOT2000 Series GT27 model · Mitsubis… +1
- 1
- Mitsubishi Electric GX Works3 · Mitsubishi Electric GT D… +1
- 1
- Mitsubishi Electric GX Works3 · Mitsubishi Electric GT D… +2
- 1
- Mitsubishi Electric GX Works3 · Mitsubishi Electric GX W… +1
- 1
Critical 1
High 8
- CVE-2022-29831Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unautheMitsubishi Electric GX Works3
- CVE-2022-25164Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi ElecMitsubishi Electric GX Works3 · Mitsubishi Electric MX OPC…
- CVE-2022-40977PILZ: PASvisu and PMI affected by ZipSlipPILZ PASvisu · PILZ PMI v5xx +2
- CVE-2022-44748Uploading workflows to KNIME Server may override arbitrary file system contentsKNIME Server
- CVE-2022-2650Improper Restriction of Excessive Authentication Attempts in wger-project/wgerwger-project/wger · wger
- CVE-2022-26885Apache DolphinScheduler config file read by task riskApache Software Foundation Apache DolphinScheduler · org.ap…
- CVE-2022-4088rickxy Stock Management System processlogin.php sql injectionrickxy Stock Management System
- CVE-2022-4136Exposed Dangerous Method or Function in qmpaas/leadshopqmpaas/leadshop
Medium, low and unrated 12
- CVE-2022-29833Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unMitsubishi Electric GX Works3
- CVE-2022-29832Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GMitsubishi Electric GX Works3 · Mitsubishi Electric GX W… +1
- CVE-2022-29829Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOMitsubishi Electric GX Works3 · Mitsubishi Electric GT D… +2
- CVE-2022-29828Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthentiMitsubishi Electric GX Works3
- CVE-2022-29827Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthentiMitsubishi Electric GX Works3
- CVE-2022-29826Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Mitsubishi Electric GX Works3 · Mitsubishi Electric Motion…
- CVE-2022-29825Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) veMitsubishi Electric GX Works3 · Mitsubishi Electric GT D… +1
- CVE-2022-40976PILZ: Multiple products affected by ZipSlipPILZ PAScal · PILZ PASconnect +3
- CVE-2022-40266Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 SeriesMitsubishi Electric GOT2000 Series GT27 model · Mitsubis… +1
- CVE-2022-44749Opening workflows from untrusted resources may override arbitrary file system contentsKNIME Analytics Platform
- CVE-2022-4089rickxy Stock Management System processlogin.php cross site scriptingrickxy Stock Management System
- CVE-2022-4090rickxy Stock Management System cross-site request forgeryrickxy Stock Management System