Skip to content
OpenAdvisories

Archive

28 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /28 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

28 results · Clear filters · Feed

  • Critical 9.6
    CVE-2022-3708

    Web Stories <= 1.24.0 - Server Side Request Forgery

    The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This makes it …

    Google Web Stories Web / CMS
  • Critical 9.1
    CVE-2022-41636

    Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted…

    Haas Haas CNC Controller
  • Critical 9.8
    CVE-2022-2475

    Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Comma…

    Haas Haas CNC Controller
  • Critical 9.8
    CVE-2022-2474

    Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands”…

    Haas Haas CNC Controller
  • Critical 9.2
    CVE-2022-41648

    The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DN…

    HEIDENHAIN HEIDENHAIN Controller TNC 640 NC Software
  • Critical 9.9
    CVE-2022-37425

    The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.

    opennebula Ubuntu
  • Critical 10.0
    CVE-2021-38397

    Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type

    Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

    Honeywell Experion PKS ICS / OT
  • Critical 9.1
    CVE-2021-38395

    Honeywell Experion PKS and ACE Controllers Injection

    Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

    Honeywell Experion PKS ICS / OT
  • Critical 10.0
    CVE-2021-36206

    CEVAS

    All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-controllable input and could allow a user to bypass authentication and retrieve data with specially crafted SQL queries.

    Johnson Controls CEVAS
  • Critical 9.9
    CVE-2022-39366

    DataHub missing JWT signature check

    DataHub is an open-source metadata platform. Prior to version 0.8.45, the `StatelessTokenService` of the DataHub metadata service (GMS) does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadat…

    datahub-project datahub acryl-datahub PyPI
  • Critical 9.1
    CVE-2022-31678 Scanner template

    VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V de…

  • Critical 9.4
    CVE-2022-3741

    Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot

    Impact varies for each individual vulnerability in the application. For generation of accounts, it may be possible, depending on the amount of system resources available, to create a DoS event in the server. These accounts still need to be activated; however,…

    chatwoot chatwoot/chatwoot
  • Critical 9.8
    CVE-2022-37621

    thlorenz browserify-shim vulnerable to prototype pollution

    Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js.

    browserify-shim npm
  • Critical 9.8
    CVE-2022-37915

    A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unaut…

  • Critical 9.8
    CVE-2022-37914

    Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unaut…

  • Critical 9.8
    CVE-2022-37913

    Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unaut…

  • Critical 9.8
    CVE-2022-43168

    Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.

  • Critical 9.8
    CVE-2022-43286

    Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_…

  • Critical 9.8
    CVE-2021-38217

    SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php.

  • Critical 9.8
    CVE-2021-38737

    SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php.

  • Critical 9.8
    CVE-2021-38730

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.

  • Critical 9.8
    CVE-2021-38734

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.

  • Critical 9.8
    CVE-2021-38729

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.

  • Critical 9.8
    CVE-2021-38736

    SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php.

  • Critical 9.8
    CVE-2021-38733

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.

  • Critical 9.8
    CVE-2021-38732

    SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.

  • Critical 9.8
    CVE-2021-38731

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.

  • Critical 9.8
    CVE-2021-37782

    Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.