Skip to content
OpenAdvisories

Archive

30 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /30 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • High 7.5
    CVE-2022-45337

    Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.

  • Medium 5.5
    CVE-2022-45869

    A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial o…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.2
    CVE-2022-45328

    Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ed…

  • High 7.8
    CVE-2022-45332

    LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at de…

  • High 7.2
    CVE-2022-44294

    Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

  • High 7.2
    CVE-2022-44296

    Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

  • Critical 9.8
    CVE-2022-44136 Public exploit

    Zenario CMS is vulnerable to Remote Code Execution (RCE).

    Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

    tribalsystems/zenario Packagist
  • Critical 9.8
    CVE-2022-44151

    Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

  • High 7.2
    CVE-2022-44295

    Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

  • Critical 9.8
    CVE-2022-44097

    Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate pr…

  • Critical 9.8
    CVE-2022-44096

    Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate …

  • High 7.5
    CVE-2022-23746

    The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the po…

  • Medium 4.3
    CVE-2022-41413 Public exploit

    perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attac…

  • High 8.6
    CVE-2022-41412 Scanner template

    An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and exe…

  • Medium 5.0
    CVE-2022-22984

    Command Injection

    The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1…

    snyk snyk-gradle-plugin snyk-mvn-plugin snyk-python-plugin npm
  • Medium 6.3
    CVE-2021-4242

    Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection

    A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotel…

    Sapido BRC76n BR270n RB1732
  • Medium 6.1
    CVE-2021-31740

    SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripti…