Skip to content
OpenAdvisories

Archive

6 October 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.0
    CVE-2022-41853 Public exploit

    Remote code execution in HyperSQL DataBase

    Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…

  • Medium 5.3
    CVE-2022-39275 Public exploit

    Improper object type validation in saleor

    Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which allowed to access database objects that the authenticated user may not be allowed to access. This vulnerability can…