Skip to content

CyberSecBulletin

CVEs published on November 13, 2022

10 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
HMS-PHP: Improper Neutralization
CVE-2022-3972Nov 13, 2022Pingkon
9.8 Critical severity
HMS-PHP: Improper Neutralization
CVE-2022-3973Nov 13, 2022Pingkon
8.8 High severity
A vulnerability was found in LibTIFF. It has been classified as critical.
CVE-2022-3970Nov 13, 2022LibTIFFEPSS 1.71%
8.8 High severity
libiec61850: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-3976Nov 13, 2022MZ Automation
8.1 High severity
ffmpeg: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-3964Nov 13, 2022FFmpegEPSS 4.71%
8.1 High severity
ffmpeg: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-3965Nov 13, 2022FFmpegEPSS 1.2%
8.1 High severity
NagVis: Incorrect Type Conversion or Cast
CVE-2022-3979Nov 13, 2022NagVisEPSS 1.29%
8.8 High severity
Bento4: Out-of-bounds Write
CVE-2022-3974Nov 13, 2022AxiomaticEPSS 1.04%
7.8 High severity
Vesta Control Panel: Improper Neutralization
CVE-2022-3967Nov 13, 2022Vesta Control Panel
7.5 High severity
Ultimate Member Plugin: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-3966Nov 13, 2022Ultimate Member Plugin