Skip to content
OpenAdvisories

Archive

November 2022

Vulnerabilities first published in this month (UTC), newest first.

← October 2022 2022 / November December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

100 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-43144 Public exploit

    A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web …

  • High 7.8
    CVE-2022-20452 Public exploit

    In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused…

    android-platform-frameworks-base Android Ubuntu
  • Medium 5.4
    CVE-2021-40303 Public exploit

    perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.

  • Medium 4.7
    CVE-2021-42205 Public exploit

    ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows loc…

  • Critical 9.8
    CVE-2022-31691 Public exploit

    Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse C…

  • Medium 5.4
    CVE-2021-39473 Public exploit

    Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting (XSS) due to improper sanitization of comment and cont…

  • High 8.8
    CVE-2022-43571 Public exploit EPSS 19%

    Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

    In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

    Splunk Splunk Enterprise
  • High 7.5
    CVE-2022-32287 Public exploit

    Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives

    A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA…

    Apache Software Foundation Apache UIMA uimaj org.apache.uima:uimaj-core Ubuntu Maven
  • High 8.8
    CVE-2022-38374 Public exploit

    A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0…

    Fortinet Fortinet FortiADC Network devices
  • High 7.5
    CVE-2022-3509 Public exploit

    Parsing issue in protobuf textformat

    A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

    Google Protocolbuffers trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2022-34662 Public exploit

    Apache DolphinScheduler prior to 3.0.0 allows path traversal

    When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • High 7.8
    CVE-2022-32898 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS V…

    Apple macOS watchOS macOS
  • High 7.8
    CVE-2022-32947 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13,…

    Apple macOS watchOS macOS
  • Medium 5.5
    CVE-2022-32862 Public exploit

    This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, …

    Apple macOS macOS
  • High 7.8
    CVE-2022-32932 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 an…

    Apple iOS and iPadOS watchOS iOS
  • Unscored —
    CVE-2022-3656 Public exploit

    Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • Unscored —
    CVE-2022-3653 Public exploit

    Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • High 7.5
    CVE-2022-3602 Public exploit EPSS 91%

    X.509 Email Address 4-byte Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the ap…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io
  • High 7.5
    CVE-2022-3786 Public exploit EPSS 92%

    X.509 Email Address Variable Length Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an appli…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io
  • High 8.8
    CVE-2022-26717 Public exploit

    A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…

    Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu