Skip to content
OpenAdvisories

Archive

7 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /7 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.7
    CVE-2022-41800 Public exploit Scanner template EPSS 77%

    Appliance mode iControl REST vulnerability

    In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to…

    F5 BIG-IP Network devices
  • High 8.8
    CVE-2022-41622 Public exploit EPSS 92%

    iControl SOAP vulnerability

    In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP BIG-IQ Centralized Management Network devices
  • High 7.5
    CVE-2022-46770 Public exploit EPSS 22%

    qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of …

  • Medium 5.4
    CVE-2022-45217 Public exploit

    A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary…

  • Critical 9.8
    CVE-2022-45025 Public exploit EPSS 35%

    Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerab…