Skip to content
OpenAdvisories

Archive

27 November 2022

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —

    An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-fre…

  • High 7.5

    A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org…

  • High 7.8
    CVE-2022-45934 Public exploit

    An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integ…

  • High 7.5

    A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org…

  • Critical 9.8
    CVE-2022-45933 Scanner template EPSS 52%

    KubeView vulnerable to full cluster takeover due to improper authentication

    KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position i…

  • Medium 6.5

    The ESL (Electronic Shelf Label) protocol, as implemented by (for example) the OV80e934802 RF transceiver on the ETAG-2…

  • High 7.5

    A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org…

  • Critical 9.1

    In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was …