Skip to content
OpenAdvisories

Archive

11 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /11 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

30 results · Clear filters · Feed

  • High 7.1
    CVE-2022-38385

    IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitiv…

    IBM Cloud Pak for Security
  • High 7.1
    CVE-2022-38387

    IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbi…

    IBM Cloud Pak for Security
  • High 7.5
    CVE-2022-3510

    Parsing issue in protobuf message-type extension

    A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded…

    Google Protocolbuffers druid trino Debian Ubuntu Wolfi Maven
  • High 7.9
    CVE-2022-21198

    Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user …

  • High 8.2
    CVE-2022-26006

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • High 8.2
    CVE-2022-30542

    Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and In…

  • High 7.5
    CVE-2022-36370

    Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may…

  • High 7.0
    CVE-2022-37334

    Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before versio…

  • High 7.5
    CVE-2022-38099

    Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may a…

  • High 7.5
    CVE-2022-26124

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugge…

  • High 7.5
    CVE-2022-35276

    Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allo…

  • High 7.5
    CVE-2022-36789

    Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini…

  • High 7.7
    CVE-2022-34152

    Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may al…

  • High 7.5
    CVE-2022-32569

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may al…

  • High 7.7
    CVE-2022-21794

    Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, …

  • High 7.8
    CVE-2022-37345

    Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticate…

  • High 8.2
    CVE-2022-33176

    Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mi…

  • High 8.2
    CVE-2021-33164

    Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged use…

  • High 8.0
    CVE-2022-26513

    Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unaut…

  • High 8.8
    CVE-2022-33942

    Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to poten…

  • High 7.3
    CVE-2022-29466

    Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated …

  • High 8.1
    CVE-2022-29893

    Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.…

  • High 7.4
    CVE-2021-33159

    Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15…

  • High 8.6
    CVE-2022-27497

    Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.…

  • High 8.7
    CVE-2022-26845

    Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.…

  • High 8.2
    CVE-2022-26341

    Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before versi…

  • High 7.3
    CVE-2022-3955

    tholum crm42 Login class.user.php sql injection

    A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of the file crm42\class\class.user.php of the component Login. The manipulation of the argument user_name leads to sql injection. The attack m…

    tholum crm42
  • High 7.7
    CVE-2022-41906

    OpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF)

    OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via Email, Slack, Amazon Chime, Custom web-hook etc channels. A potential SSRF issue in OpenSearch Notifications Plugin starting in 2.0.0 and pr…

    OpenSearch notifications
  • High 8.6
    CVE-2022-41892

    Arches vulnerable to SQL Injection

    Arches is a web platform for creating, managing, & visualizing geospatial data. Versions prior to 6.1.2, 6.2.1, and 7.1.2 are vulnerable to SQL Injection. With a carefully crafted web request, it's possible to execute certain unwanted sql statements against t…

    archesproject arches arches PyPI
  • High 8.2
    CVE-2022-41905

    wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

    WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. This issue has been patched, users can upgrade to version 4.1.0. As a…

    mar10 wsgidav wsgidav PyPI