Archive
17 November 2022
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Critical 9.8
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker…
-
Medium 5.4CVE-2022-36432 Public exploit
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers …
-
Critical 9.8
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
-
High 8.8CVE-2022-44384 Public exploit
An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP f…
-
Medium 6.8CVE-2022-43096 Public exploit
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.
-
Medium 6.1CVE-2022-43332 Public exploit
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTM…