Skip to content
OpenAdvisories

Archive

28 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /28 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2022-3689 Public exploit

    HTML Forms < 1.3.25 - Admin+ SQLi

    The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users

    Web / CMS
  • Critical 9.8
    CVE-2022-36193 Public exploit

    SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chan…

  • High 8.8
    CVE-2022-45442 Public exploit

    Sinatra vulnerable to Reflected File Download attack

    Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition hea…

    sinatra sinatra sinatra ruby-sinatra Debian Ubuntu RubyGems