Skip to content
OpenAdvisories

Archive

24 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /24 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2022-29831

    Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z al…

    Mitsubishi Electric GX Works3 ICS / OT
  • High 8.6
    CVE-2022-25164

    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095…

    Mitsubishi Electric GX Works3 MX OPC UA Module Configurator-R ICS / OT
  • High 7.5
    CVE-2022-40977

    PILZ: PASvisu and PMI affected by ZipSlip

    A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or…

    Pilz PASvisu PMI v8xx (266807, 266812, 266815) PMI v7xx (266704 + 266707)
  • High 7.1
    CVE-2022-44748

    Uploading workflows to KNIME Server may override arbitrary file system contents

    A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME …

    KNIME KNIME Server
  • High 8.6
    CVE-2022-4136

    Exposed Dangerous Method or Function in qmpaas/leadshop

    Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.

    qmpaas qmpaas/leadshop
  • High 7.3
    CVE-2022-4088

    rickxy Stock Management System processlogin.php sql injection

    A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack…

    rickxy Stock Management System
  • High 7.8
    CVE-2022-2650 Public exploit

    Improper Restriction of Excessive Authentication Attempts in wger-project/wger

    Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2.

    wger-project wger-project/wger wger PyPI
  • High 7.5
    CVE-2022-26885

    Apache DolphinScheduler config file read by task risk

    When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher.

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler-common Maven