Skip to content
OpenAdvisories

Archive

3 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /3 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Low 3.8
    CVE-2022-20962

    A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticate…

    Cisco Cisco Identity Services Engine Software Network devices
  • Low 3.8
    CVE-2022-37911

    Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A…

    Hewlett Packard Enterprise Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
  • Low 2.7
    CVE-2021-36906

    WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities

    Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress.

    ExpressTech Systems Quiz And Survey Master (WordPress plugin) Web / CMS
  • Low 3.7
    CVE-2022-3258

    Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authenti…

    HYPR Workforce Access
  • Low 2.6
    CVE-2022-3675

    Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB req…

    Fedora CoreOS
  • Low 2.6
    CVE-2022-39376

    Improper input validation on emails links in GLPI

    GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Users may be able to inject custom fields values in `mailto` li…

    GLPI glpi glpi Ubuntu
  • Low 3.5
    CVE-2022-39372

    Stored Cross-Site Scripting (XSS) in user information in GLPI

    GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Authenticated users may store malicious code in their account i…

    GLPI glpi glpi Ubuntu
  • Low 3.5
    CVE-2022-39276

    Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning

    GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or an external calendar in planning is subje…

    GLPI glpi glpi Ubuntu
  • Low 2.7
    CVE-2022-44622

    In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive

    JetBrains TeamCity
  • Low 2.2
    CVE-2022-44646

    In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings

    JetBrains TeamCity
  • Low 3.3
    CVE-2022-42442

    IBM Robotic Process Automation for Cloud Pak information disclosure

    IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.

    IBM Robotic Process Automation for Cloud Pak