Skip to content
OpenAdvisories

Archive

17 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /17 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.9
    CVE-2022-42453

    HCL BigFix Platform is affected by insufficient warnings

    There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.

    HCL Software BigFix Platform
  • Medium 6.0
    CVE-2022-38659

    HCL BigFix Platform is affected by insecure credential storage

    In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.

    HCL Software BigFix Platform
  • Medium 6.5
    CVE-2022-23488

    BigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Data

    BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are vulnerable to Insertion of Sensitive Information Into Sent Data. The moderators-only webcams lock setting is not enforced on the backend, which allows an attacker to subsc…

    bigbluebutton bigbluebutton
  • Medium 6.3
    CVE-2022-4584

    Axiomatic Bento4 mp42aac heap-based overflow

    A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack may be launched remot…

    Axiomatic Bento4
  • Medium 4.3
    CVE-2022-4587

    Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting

    A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argumen…

    Opencaching Deutschland oc-server3
  • Medium 5.4
    CVE-2022-4572

    UBI Reader UBIFS File output.py ubireader_extract_files path traversal

    A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of the component UBIFS File Handler. The manipulation leads to…

    ubi-reader PyPI
  • Medium 6.3
    CVE-2022-4583

    jLEMS JUtil.java unpackJar path traversal

    A vulnerability was found in jLEMS. It has been declared as critical. Affected by this vulnerability is the function unpackJar of the file src/main/java/org/lemsml/jlems/io/util/JUtil.java. The manipulation leads to path traversal. The attack can be launched …

  • Medium 5.5
    CVE-2022-4589

    cyface Terms and Conditions Module views.py returnTo redirect

    A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attac…

    cyface Terms and Conditions Module django-termsandconditions PyPI
  • Medium 6.3
    CVE-2021-4246

    roxlukas LMeve Login Page sql injection

    A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remot…

    roxlukas LMeve