Archive

28 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /28 December 2022 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Critical 9.8

CVE-2022-3603

Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection

The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection.

Web / CMS

Nov 28, 2022
Critical 9.8

CVE-2022-36193 Public exploit

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chan…

Nov 28, 2022
Critical 9.8

CVE-2022-44283

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.

Nov 28, 2022
Critical 9.8

CVE-2022-44399

Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/…

Nov 28, 2022
Critical 9.8

CVE-2022-44400

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.

Nov 28, 2022
Critical 9.8

CVE-2022-44401

Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

Nov 28, 2022
Critical 9.1

CVE-2022-41912

crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading t…

crewjam saml github.com/crewjam/saml golang-github-crewjam-saml Ubuntu Go

Nov 28, 2022