Skip to content
OpenAdvisories

Archive

9 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /9 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2022-46157

    Remote php code execution in Akeneo PIM

    Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Communi…

    akeneo pim-community-dev akeneo/pim-community-dev Packagist
  • High 8.1
    CVE-2022-46166 Public exploit

    Spring Boot Admins integrated notifier support allows arbitrary code execution

    Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers (e.g. Teams-Notifier) and write access to environment variables via UI are affe…

    codecentric spring-boot-admin de.codecentric:spring-boot-admin Maven
  • High 8.2
    CVE-2022-23484

    Integer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds f…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-23483

    Out-of-Bound Read in libxrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There are no known workarounds for this issue. …

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 7.4
    CVE-2022-3259

    Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.

  • High 7.5
    CVE-2022-44790

    Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could …

  • High 7.2
    CVE-2022-44838

    Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at …