Skip to content
OpenAdvisories

Archive

23 November 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-23583 Public exploit

    OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary…

  • Critical 9.8
    CVE-2020-23591 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker …

  • Critical 9.8
    CVE-2020-23584 Public exploit EPSS 41%

    Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes a…

  • Critical 9.8
    CVE-2022-44118 Public exploit

    dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

  • Critical 9.6
    CVE-2022-41924 Public exploit

    Tailscale Windows daemon is vulnerable to RCE via CSRF

    A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP so…

  • Critical 9.1
    CVE-2022-41923 Public exploit

    Grails Spring Security Core plugin vulnerable to privilege escalation

    Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements of a different endpoint (i.e. the donor endpoint). In some …