Skip to content
OpenAdvisories

Archive

11 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /11 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-3941

    Activity Log Plugin HTTP Header neutralization for logs

    A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. …

  • Medium 6.3
    CVE-2022-3947

    eolinker goku_lite list sql injection

    A vulnerability classified as critical has been found in eolinker goku_lite. This affects an unknown part of the file /balance/service/list. The manipulation of the argument route/keyword leads to sql injection. It is possible to initiate the attack remotely.…

    eolinker goku_lite
  • Medium 6.3
    CVE-2022-3956

    tsruban HHIMS Patient Portrait sql injection

    A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the component Patient Portrait Handler. The manipulation of the argument PID leads to sql injection. It is possible to launch the attack remotely. I…

    tsruban HHIMS
  • Medium 5.9
    CVE-2022-45193

    CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privi…

  • Medium 6.6
    CVE-2022-41882

    Nextcloud Desktop vulnerable to code injection via malicious link

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu Alpine
  • Medium 4.2
    CVE-2022-41873

    Out-of-bounds read and write in BLE L2CAP module

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-bounds read. While processing the L2CAP protocol, the Bluetooth Low Energy stack of Contiki-NG needs to map an inc…

    Contiki-NG Contiki-NG
  • Medium 6.4
    CVE-2022-41904

    Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessions

    Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encrypted using Megolm for which trust could not be established did not get decorated accordingly (with warning shields). Therefore a malicious h…

    vector-im element-ios iOS