Skip to content
OpenAdvisories

Archive

7 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /7 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2022-39959 Public exploit

    Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini fo…

  • High 8.0
    CVE-2022-39290 Public exploit

    CSRF key bypass using HTTP methods in zoneminder

    ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated users can bypass CSRF keys by modifying the request supplied to the Zoneminder web application. These modifications include replacing HTTP POS…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2022-39291 Public exploit

    Denial of service through logs in zoneminder

    ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are subject to a vulnerability which allows users with "View" system permissions to inject new data into the logs stored by Zoneminder. This was …

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu Alpine
  • High 7.6
    CVE-2022-39285 Public exploit

    Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder

    ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "td" brackets. This then allows a malicious user to provide code…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu Alpine
  • High 7.2
    CVE-2022-42092 Public exploit

    Backdrop CMS Unrestricted File Upload vulnerability

    Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

    backdrop/backdrop Packagist