Skip to content
OpenAdvisories

Archive

6 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /6 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-42699

    WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)

    Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.

    WPecommerce, Alexanderfoxc Easy WP SMTP
  • Critical 9.8
    CVE-2022-42888

    WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation

    Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress.

    Repute InfoSystems ARMember
  • Critical 9.8
    CVE-2022-45359 EPSS 14%

    WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload

    Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

    Yith YITH WooCommerce Gift Cards Web / CMS
  • Critical 9.6
    CVE-2022-46332

    Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"

    The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and b…

    Proofpoint Enterprise Protection
  • Critical 10.0
    CVE-2022-46161

    Code injection in pdfmake

    pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of…

    bpampuch pdfmake
  • Critical 9.8
    CVE-2020-6627 Public exploit EPSS 13%

    The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS comma…

  • Critical 9.8
    CVE-2022-46383

    RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 …

  • Critical 9.1
    CVE-2022-44900 Public exploit

    py7zr directory traversal vulnerability

    A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.

    py7zr py7zr py7zr Debian Ubuntu PyPI