Skip to content
OpenAdvisories

Archive

22 November 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.8
    CVE-2022-3910 Public exploit

    Use after free in IO_uring in the Linux Kernel

    Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which …

  • High 8.8
    CVE-2022-39066 Public exploit EPSS 27%

    There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the pho…

  • Medium 4.8
    CVE-2022-41445 Public exploit

    A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execut…

  • Medium 4.8
    CVE-2022-42097 Public exploit

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .

  • Medium 4.8
    CVE-2022-42094 Public exploit Scanner template

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

  • High 8.8
    CVE-2022-42098 Public exploit

    KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.