Skip to content
OpenAdvisories

Archive

10 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /10 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-38121 Public exploit

    POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials

    UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.

    POWERCOM UPSMON PRO
  • Medium 6.5
    CVE-2022-38120 Public exploit

    POWERCOM CO., LTD. UPSMON PRO - Path Traversal

    UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.

    POWERCOM UPSMON PRO
  • High 7.5
    CVE-2022-41876 Public exploit

    ezplatform-graphql GraphQL queries can expose password hashes

    ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hash…

    ezsystems ezplatform-graphql ezsystems/ezplatform-graphql Packagist