Skip to content
OpenAdvisories

Archive

9 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /9 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.6
    CVE-2022-23510

    SQl injection in cube-js

    cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL row-level security and run arbitrary SQL via the newly introduced /v1/sql-runner endpoint. This issue has been resolved in version 0.31.24…

    cube-js cube.js @cubejs-backend/api-gateway npm
  • Critical 9.1
    CVE-2022-23477

    Buffer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in audin_send_open() function. There are no known workarounds for this issue. Users are…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23480

    Buffer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req() function. There are no known workarounds…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23479

    Buffer Overflow occurs in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. User…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23478

    Out of Bound Write in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarou…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23493

    Out of Bound Read in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close() function. There are no known workarou…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2022-4170

    The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker c…

    rxvt-unicode rxvt-unicode rxvt-unicode Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2022-4390

    A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6…

  • Critical 9.1
    CVE-2022-45290

    Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexControlle…