Skip to content
OpenAdvisories

Archive

21 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /21 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-3919

    A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow esca…

    HP OMEN Gaming Hub and HP Command Center
  • Critical 9.8
    CVE-2021-3821

    A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability …

    HP HP FutureSmart
  • Critical 9.8
    CVE-2021-3437 EPSS 16%

    Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of…

    HP OMEN Gaming Hub SDK
  • Critical 9.8
    CVE-2022-3600

    Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection

    The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

    Web / CMS
  • Critical 9.8
    CVE-2022-3634

    Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection

    The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection

    Web / CMS
  • Critical 9.8
    CVE-2022-30258

    An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolut…

  • Critical 9.8
    CVE-2022-30257

    An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolut…

  • Critical 9.8
    CVE-2022-44180

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.

  • Critical 9.8
    CVE-2022-44785

    An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injectio…

  • Critical 9.8
    CVE-2022-44176

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.

  • Critical 9.8
    CVE-2022-44183

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.

  • Critical 9.8
    CVE-2022-44177

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.

  • Critical 9.8
    CVE-2022-44172

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.

  • Critical 9.8
    CVE-2022-44175

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.

  • Critical 9.8
    CVE-2022-44178

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.

  • Critical 9.8
    CVE-2022-44174

    Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.

  • Critical 9.8
    CVE-2022-44171

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.

  • Critical 9.6
    CVE-2022-43143 Public exploit

    A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts…

  • Critical 9.8
    CVE-2021-24649

    WP User Frontend < 3.5.29 - Obscure Registration as Admin

    The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpuf_encryption(). This could allow an attacker having access…

    Web / CMS