Skip to content
OpenAdvisories

Archive

7 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /7 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 4.0
    CVE-2022-44745

    Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (W…

    Acronis Acronis Cyber Protect Home Office
  • Medium 6.5
    CVE-2022-2188

    DXL Broker privilege escalation vulnerability

    Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

    Trellix DXL Broker
  • Medium 6.5
    CVE-2022-38164

    A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could…

  • Medium 6.5
    CVE-2022-3873

    Cross-site Scripting (XSS) - DOM in jgraph/drawio

    Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

    jgraph jgraph/drawio jgraph Ubuntu
  • Medium 5.3
    CVE-2022-3489

    WP Hide <= 0.0.2 - Unauthenticated Settings Update

    The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request

    Web / CMS
  • Medium 4.3
    CVE-2022-3451

    Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls

    The Product Stock Manager WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks in multiple AJAX actions, allowing users with a role as low as subscriber to call them. One action in particular could allow to update arbitrary options

    Web / CMS
  • Medium 4.8
    CVE-2022-3462

    Highlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting

    The Highlight Focus WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…

    Web / CMS
  • Medium 4.3
    CVE-2022-2387

    Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF

    The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete a…

    Web / CMS
  • Medium 6.5
    CVE-2022-44793 EPSS 53%

    handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Except…

    net-snmp net-snmp net-snmp net-snmp Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2022-44795

    An issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could le…

  • Medium 6.5
    CVE-2022-44792 EPSS 52%

    handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bu…

    net-snmp net-snmp net-snmp net-snmp Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2022-43351

    Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the componen…

  • Medium 4.8
    CVE-2022-43046

    Food Ordering Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the compon…

  • Medium 4.7
    CVE-2021-42205 Public exploit

    ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows loc…