Skip to content
OpenAdvisories

Archive

4 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /4 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.9
    CVE-2022-43564

    Denial of Service in Splunk Enterprise through search macros

    In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use of specially crafted search macros.

    Splunk Splunk Enterprise
  • Medium 6.2
    CVE-2022-38661

    HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager

    HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash.

    HCL Software HCL Workload Automation
  • Medium 5.5
    CVE-2022-38654

    HCL Domino is susceptible to an information disclosure vulnerability

    HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access at…

    HCL Software HCL Domino
  • Medium 6.6
    CVE-2022-40263

    BD Totalys MultiProcessor - Hardcoded Credentials

    BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health informat…

    Becton Dickson (BD) BD Totalys MultiProcessor
  • Medium 4.8
    CVE-2022-27894

    The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

    The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

    Palantir Foundry Blobster Service
  • Medium 4.2
    CVE-2022-27893

    The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.

    The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.

    Palantir Foundry Magritte plugin osisoft-pi-web-connector
  • Medium 5.6
    CVE-2022-39384

    OpenZeppelin Contracts initializer reentrancy may lead to double initialization

    OpenZeppelin Contracts is a library for secure smart contract development. Before version 4.4.1 but after 3.2.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they…

    OpenZeppelin openzeppelin-contracts
  • Medium 6.5
    CVE-2022-38582

    Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write ar…

  • Medium 4.2
    CVE-2022-3023

    Use of Externally-Controlled Format String in pingcap/tidb

    Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.

    pingcap pingcap/tidb github.com/pingcap/tidb Go
  • Medium 5.9
    CVE-2022-3340

    Trellix IPS Manager vulnerable to XXE

    XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

    Trellix Trellix IPS Manager
  • Medium 5.4
    CVE-2021-39473 Public exploit

    Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting (XSS) due to improper sanitization of comment and cont…

  • Medium 6.5
    CVE-2021-39432

    diplib Double Free

    diplib v3.0.0 is vulnerable to Double Free.

    diplib PyPI