Skip to content
OpenAdvisories

Archive

16 November 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-45047 Public exploit

    Apache MINA SSHD: Java unsafe deserialization vulnerability

    Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…

  • High 8.8
    CVE-2021-38819 Public exploit

    A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the al…