Skip to content
OpenAdvisories

Archive

17 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /17 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

32 results · Clear filters · Feed

  • High 8.8
    CVE-2022-41775

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43506

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43452

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43447

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43457

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-36924

    Local Privilege Escalation in Zoom Rooms Installer for Windows

    The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.

    Zoom Video Communications Zoom Rooms Installer for Windows Windows
  • High 8.8
    CVE-2022-28768

    Local Privilege Escalation in Zoom Client Installer for macOS

    The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their p…

    Zoom Video Communications Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) macOS
  • High 7.2
    CVE-2022-39179

    College Management System v1.0 - Authenticated remote code execution

    College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.

    College Management College Management System v1.0
  • High 7.5
    CVE-2022-36785

    D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.

    D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. *Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setup…

    D-Link G integrated Access Device4 Network devices
  • High 7.1
    CVE-2022-40192

    WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.

    gVectors Team wpForo Forum (WordPress plugin) Web / CMS
  • High 7.5
    CVE-2022-3090

    Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 vers…

    Red Lion Controls Crimson 3.0 Crimson 3.2 Crimson 3.1
  • High 8.2
    CVE-2022-39389

    Witness Block Parsing DoS Vulnerability in lnd

    Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version `v0.15.4` are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded st…

    lightningnetwork lnd github.com/lightningnetwork/lnd Go
  • High 7.5
    CVE-2022-45461

    The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenti…

  • High 8.8
    CVE-2022-44384 Public exploit

    An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP f…

  • High 7.2
    CVE-2022-44403

    Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.

  • High 7.2
    CVE-2022-44402

    Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.

  • High 7.8
    CVE-2022-44725

    OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. T…

  • High 7.8
    CVE-2022-23748 Exploited

    mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from wh…

    Windows
    KEV Feb 6, 2025
  • High 7.5
    CVE-2022-42982

    BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP…

  • High 7.5
    CVE-2022-42732

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

    Siemens syngo Dynamics ICS / OT
  • High 7.5
    CVE-2022-42733

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

    Siemens syngo Dynamics ICS / OT
  • High 7.5
    CVE-2022-42891

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

    Siemens syngo Dynamics ICS / OT
  • High 8.8
    CVE-2022-42246

    Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account.

  • High 7.8
    CVE-2022-42533

    In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This…

    Android
  • High 7.5
    CVE-2022-42894

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Reque…

    Siemens syngo Dynamics ICS / OT
  • High 7.5
    CVE-2022-42734

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

    Siemens syngo Dynamics ICS / OT
  • High 7.5
    CVE-2022-42893

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

    Siemens syngo Dynamics ICS / OT
  • High 7.2
    CVE-2022-43162

    Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…

  • High 7.5
    CVE-2022-43140 Scanner template

    kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.contro…

  • High 8.8
    CVE-2022-43183

    XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)

    XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

    com.xuxueli:xxl-job-core Maven
  • High 7.2
    CVE-2022-43179

    Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?p…

  • High 7.2
    CVE-2022-43163

    Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…