Skip to content
OpenAdvisories

Archive

14 December 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2022-3590 Public exploit Scanner template

    WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

    WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

  • High 8.4
    CVE-2022-22063 Public exploit

    Memory corruption in Core

    Memory corruption in Core due to improper configuration in boot remapper.

  • High 8.2
    CVE-2022-31705 Public exploit

    VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI).…