Skip to content
OpenAdvisories

Archive

1 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /1 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2022-1471 Public exploit EPSS 100%

    Remote Code execution in SnakeYAML

    SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrust…

    SnakeYaml SnakeYaml management-api-for-apache-cassandra-5.0 cassandra-reaper Debian Ubuntu Wolfi Maven
  • Critical 9.8
    CVE-2022-44262 Public exploit

    ff4j is vulnerable to Remote Code Execution (RCE)

    ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE).

    org.ff4j:ff4j-core Maven
  • High 7.5
    CVE-2022-37017 Public exploit

    Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Cont…