Skip to content
OpenAdvisories

Archive

19 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /19 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-4061 Public exploit

    JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

    The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.

    Web / CMS
  • Critical 9.8
    CVE-2022-4063 Public exploit Scanner template EPSS 10%

    InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE

    The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.

    Web / CMS
  • Medium 4.3
    CVE-2022-4611 Public exploit

    Click Studios Passwordstate hard-coded credentials

    A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack re…

    Click Studios Passwordstate Passwordstate Browser Extension Chrome Browsers