Skip to content
OpenAdvisories

Archive

November 2022

Vulnerabilities first published in this month (UTC), newest first.

← October 2022 2022 / November December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

267 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-44136 Public exploit

    Zenario CMS is vulnerable to Remote Code Execution (RCE).

    Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

    tribalsystems/zenario Packagist
  • Critical 9.8
    CVE-2022-44151

    Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

  • Critical 9.8
    CVE-2022-44097

    Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate pr…

  • Critical 9.8
    CVE-2022-44096

    Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate …

  • Critical 9.8
    CVE-2022-44038

    Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRun…

  • Critical 9.8
    CVE-2022-44354

    SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

  • Critical 9.8
    CVE-2022-42109

    Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /sho…

  • Critical 9.8
    CVE-2022-3603

    Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection

    The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection.

    Web / CMS
  • Critical 9.8
    CVE-2022-36193 Public exploit

    SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chan…

  • Critical 9.8
    CVE-2022-44283

    AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.

  • Critical 9.8
    CVE-2022-44399

    Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/…

  • Critical 9.8
    CVE-2022-44400

    Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.

  • Critical 9.8
    CVE-2022-44401

    Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

  • Critical 9.1
    CVE-2022-41912

    crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements

    The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading t…

    crewjam saml github.com/crewjam/saml golang-github-crewjam-saml Ubuntu Go
  • Critical 9.8
    CVE-2022-45933 Scanner template EPSS 52%

    KubeView vulnerable to full cluster takeover due to improper authentication

    KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position i…

    github.com/benc-uk/kubeview Go
  • Critical 9.1
    CVE-2022-43705

    In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was …

    botan botan botan2 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2022-45908

    PaddlePaddle vulnerable to code injection via winstr

    In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.

    paddlepaddle PyPI
  • Critical 9.8
    CVE-2022-45907

    PyTorch vulnerable to arbitrary code execution

    In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.

    pytorch pytorch torch Debian Ubuntu PyPI
  • Critical 9.1
    CVE-2022-45909

    drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.

  • Critical 9.6
    CVE-2022-4135 Exploited EPSS 32%

    Heap buffer overflow in GPU

    Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu npm
    KEV Nov 28, 2022
  • Critical 9.1
    CVE-2022-36133

    The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication…

  • Critical 9.8
    CVE-2022-45207

    Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

    org.jeecgframework.boot:jeecg-module-system Maven
  • Critical 9.8
    CVE-2022-45476

    Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just return…

  • Critical 9.1
    CVE-2022-45152

    Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library

    A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle's inbuilt cURL helper, which resulted in a blind …

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-45206

    Jeecg-boot vulnerable to SQL Injection

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

    org.jeecgframework.boot:jeecg-module-system Maven
  • Critical 9.8
    CVE-2022-44844

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass paramet…

  • Critical 9.8
    CVE-2022-44843

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port paramet…

  • Critical 9.8
    CVE-2022-41705

    Badaso vulnerable to Remote Code Execution (RCE)

    Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

    badaso/core Packagist
  • Critical 9.0
    CVE-2022-37720

    Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low privileged user such as an au…

  • Critical 9.0
    CVE-2022-37721

    PyroCMS vulnerable to stored Cross Site Scripting

    PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (XSS_ when a low privileged user such as an author, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation.

    pyrocms/pyrocms Packagist
  • Critical 9.1
    CVE-2022-29830

    Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and …

    Mitsubishi Electric GX Works3 Motion Control Setting(GX Works3 related software) ICS / OT
  • Critical 9.8
    CVE-2020-23583 Public exploit

    OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary…

  • Critical 9.8
    CVE-2020-23591 Public exploit

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker …

  • Critical 9.8
    CVE-2020-23584 Public exploit EPSS 41%

    Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes a…

  • Critical 9.8
    CVE-2022-45872

    iTerm2 before 3.4.18 mishandles a DECRQSS response.

  • Critical 9.8
    CVE-2022-45462

    Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability

    Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler-alert-plugins Maven
  • Critical 9.8
    CVE-2022-45276

    An issue in the /index/user/user_edit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Adm…

  • Critical 9.8
    CVE-2022-44120

    dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php.

  • Critical 9.8
    CVE-2022-44255

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post …

  • Critical 9.8
    CVE-2022-44251

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.