Skip to content
OpenAdvisories

Archive

21 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /21 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

90 results · Feed

  • High 7.5
    CVE-2022-44156

    Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.

  • High 8.8
    CVE-2022-44784

    An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of servic…

  • Medium 6.5
    CVE-2022-41945

    Remote Code Execution (RCE) vulnerability in super-xray via URL input

    super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.

    4ra1n super-xray
  • Medium 4.8
    CVE-2022-42096 Public exploit Scanner template

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.

    backdrop/backdrop Packagist
  • Medium 5.4
    CVE-2022-43117 Public exploit

    Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scri…

  • Medium 4.9
    CVE-2022-43709

    MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modif…

  • Critical 9.6
    CVE-2022-43143 Public exploit

    A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts…

  • Medium 6.1
    CVE-2022-43707

    MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attacke…

  • Medium 6.1
    CVE-2022-43708

    MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow att…

  • Critical 9.8
    CVE-2021-24649

    WP User Frontend < 3.5.29 - Obscure Registration as Admin

    The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpuf_encryption(). This could allow an attacker having access…

    Web / CMS