Skip to content
OpenAdvisories

Archive

23 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /23 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • High 8.0
    CVE-2022-42896 Public exploit

    Info Leak in l2cap_core in the Linux Kernel

    There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2020-23583 Public exploit

    OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary…

  • Medium 4.3
    CVE-2020-23588 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  • Medium 4.3
    CVE-2020-23586 Public exploit

    A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an una…

  • Medium 6.5
    CVE-2020-23589 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  • Low 3.1
    CVE-2020-23587 Public exploit

    A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an…

  • High 8.8
    CVE-2020-23592 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  • Critical 9.8
    CVE-2020-23591 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker …

  • Medium 6.5
    CVE-2020-23593 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenti…

  • Critical 9.8
    CVE-2020-23584 Public exploit EPSS 41%

    Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes a…

  • Medium 6.5
    CVE-2020-23590 Public exploit

    A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  • High 8.8
    CVE-2020-23585 Public exploit

    A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2…

  • Medium 5.4
    CVE-2022-35501 Public exploit

    Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the d…

  • Medium 5.4
    CVE-2022-35500 Public exploit

    Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.

  • Medium 5.4
    CVE-2022-45472 Public exploit

    CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onp…

  • High 8.8
    CVE-2022-44789 Public exploit

    A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to …

    mujs mujs Debian Ubuntu
  • Critical 9.8
    CVE-2022-44118 Public exploit

    dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

  • Critical 9.6
    CVE-2022-41924 Public exploit

    Tailscale Windows daemon is vulnerable to RCE via CSRF

    A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP so…

    tailscale tailscale tailscale.com tailscale Alpine Go
  • Critical 9.1
    CVE-2022-41923 Public exploit

    Grails Spring Security Core plugin vulnerable to privilege escalation

    Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements of a different endpoint (i.e. the donor endpoint). In some …

    grails grails-spring-security-core
  • Medium 5.4
    CVE-2022-41446 Public exploit

    An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to …

  • Medium 4.8
    CVE-2022-42095 Public exploit Scanner template

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

    backdrop/backdrop Packagist
  • High 8.8
    CVE-2021-43258 Public exploit EPSS 12%

    CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requi…