Skip to content
OpenAdvisories

Archive

17 November 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-43781 Public exploit EPSS 98%

    There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker…

  • Medium 5.4
    CVE-2022-36432 Public exploit

    The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers …

  • Critical 9.8
    CVE-2022-40881 Public exploit Scanner template EPSS 31%

    SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

  • High 8.8
    CVE-2022-44384 Public exploit

    An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP f…

  • Medium 6.8
    CVE-2022-43096 Public exploit

    Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.

  • Medium 6.1
    CVE-2022-43332 Public exploit

    A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTM…