CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
The Eventify™ WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
BitLocker Security Feature Bypass Vulnerability.
20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2022-11-14
N/A
6.5 MEDIUM
Windows GDI+ Information Disclosure Vulnerability.
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability.
Microsoft DWM Core Library Elevation of Privilege Vulnerability.
Windows Digital Media Receiver Elevation of Privilege Vulnerability.
20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2022-12-15
N/A
7.8 HIGH
Windows Hyper-V Elevation of Privilege Vulnerability.
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41045, CVE-2022-41100.
Windows Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41109.
20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2022-11-14
N/A
5.4 MEDIUM
Windows Mark of the Web Security Feature Bypass Vulnerability. This CVE ID is unique from CVE-2022-41049.