Skip to content
OpenAdvisories

Archive

1 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /1 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.1
    CVE-2022-2969

    ICSA-22-307-03 Delta Industrial Automation DIALink Path traversal

    Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize …

    Delta Industrial Automation DIALink
  • High 7.1
    CVE-2022-45797

    An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro…

    Trend Micro Trend Micro Apex One
  • High 8.3
    CVE-2022-1471 Public exploit EPSS 100%

    Remote Code execution in SnakeYAML

    SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrust…

    SnakeYaml SnakeYaml management-api-for-apache-cassandra-5.0 cassandra-reaper Debian Ubuntu Wolfi Maven
  • High 8.8
    CVE-2022-35120

    IXPdata EasyInstall 6.6.14725 contains an access control issue.

  • High 7.5
    CVE-2022-28607

    An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers …

  • High 8.8
    CVE-2022-3713

    A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall rele…

    Sophos Sophos Firewall Network devices
  • High 7.2
    CVE-2022-3696

    A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older th…

    Sophos Sophos Firewall Network devices
  • High 7.2
    CVE-2022-3226

    An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewal…

    Sophos Sophos Firewall Network devices
  • High 7.5
    CVE-2022-45640

    Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).

  • High 8.8
    CVE-2022-45045

    Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431…

  • High 8.8
    CVE-2022-40489

    ThinkCMF Cross Site Request Forgery (CSRF) vulnerability

    ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.

    thinkcmf/thinkcmf Packagist
  • High 7.4
    CVE-2022-44211

    In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings.

  • High 7.8
    CVE-2022-42718

    Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authe…

  • High 7.5
    CVE-2022-37017 Public exploit

    Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Cont…