Skip to content
OpenAdvisories

Archive

9 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /9 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

179 results · Feed

  • High 7.2
    CVE-2022-37967

    Windows Kerberos Elevation of Privilege Vulnerability

    Windows Kerberos Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.1
    CVE-2022-37966

    Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

    Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.8
    CVE-2022-37992

    Windows Group Policy Elevation of Privilege Vulnerability

    Windows Group Policy Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.1
    CVE-2022-43320

    FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

    FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer.

    feehi/cms Packagist
  • High 7.2
    CVE-2022-43291

    Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthap…

  • High 7.2
    CVE-2022-43292

    Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthap…

  • Critical 9.8
    CVE-2022-43058

    Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…

  • Medium 6.1
    CVE-2022-43118

    A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or …

  • High 8.8
    CVE-2022-43031

    DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add …

  • Medium 6.1
    CVE-2022-43119

    A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts …

  • High 7.2
    CVE-2022-43277

    Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_a…

  • Medium 6.1
    CVE-2022-43321

    Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common…

  • High 7.2
    CVE-2022-43290

    Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthap…

  • Medium 6.1
    CVE-2022-43120

    Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

    A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field.

    intelliants/subrion Packagist
  • High 7.8
    CVE-2022-43310

    An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalat…

  • Medium 6.1
    CVE-2022-43121

    Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

    A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field.

    intelliants/subrion Packagist
  • High 7.2
    CVE-2022-43278

    Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter a…

  • High 7.5
    CVE-2021-46852

    The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affe…

    Huawei HarmonyOS EMUI Network devices
  • Critical 9.8
    CVE-2021-46851

    The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerabi…

    Huawei HarmonyOS EMUI Network devices