Skip to content
OpenAdvisories

Archive

11 November 2022

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Low 3.3

    Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow a…

  • Low 3.3

    Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow…

  • Low 2.5
    CVE-2022-27499 Public exploit

    Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to …

  • Low 3.8

    Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enabl…

  • Low —

    Container build can leak any path on the host into the container

    ### Description Moby is the open source Linux container runtime and set of components used to build a variety of downstream container runtimes, including Docker CE, Mirantis Container Runtime (formerly Docker EE), and Docker Desktop. Moby allows for building …

  • Low 3.5

    sanluan PublicCMS Tab dwz.min.js initLink cross site scripting

    A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack re…

  • Low 3.5

    lanyulei ferry task.go path traversal

    A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerabili…

  • Low 2.6

    ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

    A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with …

  • Low 3.5

    ForU CMS cms_chip.php cross site scripting

    A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cms_chip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The expl…

  • Low 3.5
    CVE-2022-3949 Public exploit

    Sourcecodester Simple Cashiering System User Account cross site scripting

    A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site sc…

  • Low 3.1

    drogon Session Hash small space of random values

    A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is some unknown functionality of the component Session Hash Handler. The manipulation leads to small space of random values. The attack may be l…

  • Low 3.8

    CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.