Skip to content
OpenAdvisories

Archive

13 December 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-46364 Public exploit

    Apache CXF SSRF Vulnerability

    A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

  • Critical 9.9
    CVE-2022-41272 Public exploit

    An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined S…

  • Critical 9.8
    CVE-2022-27518 Exploited Public exploit

    Unauthenticated remote arbitrary code execution

    Unauthenticated remote arbitrary code execution

    KEV Dec 13, 2022
  • Critical 9.8
    CVE-2022-20473 Public exploit

    In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …