Skip to content
OpenAdvisories

Archive

2 December 2022

Vulnerabilities first published on this day (UTC), newest first.

94 results · Feed

  • Medium 5.4
    CVE-2022-44952 Scanner template

    Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=con…

  • Critical 9.8

    D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function.

  • Critical 9.8

    Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule.

  • Medium 5.4
    CVE-2022-44957 Scanner template

    webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclie…

  • Medium 5.4
    CVE-2022-44947 Scanner template

    Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Highlight Row fea…

  • Critical 9.8

    D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function.

  • Medium 5.4
    CVE-2022-44948 Scanner template

    Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Entities Group fe…

  • Critical 9.8

    An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbit…

  • Medium 5.4

    webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /linkedcontent/li…

  • High 7.2

    Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

  • Medium 5.4

    webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnera…

  • Medium 5.4
    CVE-2022-44944 Scanner template

    Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Announcement …

  • Critical 9.8

    An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia M…

  • High 7.5

    DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.