Skip to content
OpenAdvisories

Archive

4 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /4 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 4.3
    CVE-2022-35730

    WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress.

    Oren Hahiashvili Oceanwp sticky header
  • Medium 4.8
    CVE-2022-40968

    WordPress 2kb Amazon Affiliates Store Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

    Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress.

    2kblater 2kb Amazon Affiliates Store
  • Unscored —
    RUSTSEC-2022-0077

    `claim` is Unmaintained

    The last release was in February 2021, almost two years ago. The maintainer has been unresponsive regarding this crate for over a year. A pending issue with `claim`'s dependencies has made the crate [difficult to use](https://github.com/svartalf/rust-claim/is…

    claim crates.io
  • Critical 9.8
    CVE-2022-35508

    Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests bet…

  • Medium 4.3
    CVE-2022-35507 Scanner template

    A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) …

  • High 8.8
    CVE-2022-46410

    An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate …

  • High 8.8
    CVE-2022-46412

    An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shel…

  • High 8.8
    CVE-2022-46413

    An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated…

  • Critical 9.8
    CVE-2022-46414

    An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticat…

  • Medium 6.1
    CVE-2022-46391

    AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper ch…

    awstats awstats awstats Debian Ubuntu Alpine
  • High 8.8
    CVE-2022-46411

    An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default pas…

  • High 7.5
    CVE-2022-46405

    Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot account…