Skip to content
OpenAdvisories

Archive

19 October 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.0
    CVE-2022-41741 Public exploit

    NGINX ngx_http_mp4_module vulnerability CVE-2022-41741

    NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to c…

  • Medium 5.5
    CVE-2022-39253 Public exploit

    Git subject to exposure of sensitive information via local clone of symbolic links

    Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (wh…

  • Critical 9.8
    CVE-2016-20017 Exploited Public exploit EPSS 66%

    D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as…

    KEV Jan 8, 2024
  • Critical 9.8
    CVE-2016-20016 Public exploit EPSS 86%

    MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a …