Skip to content
OpenAdvisories

Archive

21 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /21 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-25893

    Arbitrary Code Execution

    The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the WeakMap.prototype.set method. Exploiting this vulnerability leads to access to a host object and a sandbox compromise.

    vm2 npm
  • Critical 9.8
    CVE-2022-3184 EPSS 12%

    Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware all…

    Dataprobe iBoot-PDU FW
  • Critical 9.8
    CVE-2022-3183

    Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanit…

    Dataprobe iBoot-PDU FW
  • Critical 9.8
    CVE-2022-40145

    Apache Karaf: JDBC JAAS LDAP injection

    This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the JDBC JNDI URL. The function jaas.modules.src.main.java.porg.apache.karaf.jass.modules.jdbc.JDBCUtils#doCreateDatasource use InitialContext.…

    Apache Software Foundation Apache Karaf org.apache.karaf:apache-karaf Maven
  • Critical 9.1
    CVE-2022-28173

    The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obt…

    Hikvision DS-3WF0AC-2NT DS-3WF01C-2N/O
  • Critical 9.8
    CVE-2022-47635

    Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request…