Skip to content
OpenAdvisories

Archive

21 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /21 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.8
    CVE-2022-38065

    A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and pr…

    OpenStack OpenStack openstack python-oslo.privsep Debian Ubuntu
  • High 8.8
    CVE-2022-38060

    OpenStack Kolla sudo privilege escalation vulnerability

    A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.

    OpenStack OpenStack kolla PyPI
  • High 7.4
    CVE-2022-24431

    Command Injection

    All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization.

    abacus-ext-cmdline npm
  • High 7.5
    CVE-2022-25895

    Directory Traversal

    All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code.

    lite-dev-server npm
  • High 8.6
    CVE-2022-3186

    Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an att…

    Dataprobe iBoot-PDU FW
  • High 7.8
    CVE-2022-46334

    Proofpoint Enterprise Protection Local Privilege Escalation

    Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.

    Proofpoint Enterprise Protection
  • High 7.5
    CVE-2022-25904

    Prototype Pollution

    All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties of the Object.prototype.Consolidate when using the function safeEval. This is because the function uses vm variable, leading an attack…

    safe-eval npm
  • High 7.4
    CVE-2022-25171

    Command Injection

    The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

    p4 npm
  • High 7.5
    CVE-2022-25940

    Denial of Service (DoS)

    All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.

    org.webjars.npm:lite-server lite-server npm Maven
  • High 7.5
    CVE-2022-25931

    Directory Traversal

    All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code.

    easy-static-server npm
  • High 8.4
    CVE-2022-36222

    Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L…

  • High 7.8
    CVE-2022-46330

    Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows deskto…

    Squirrel Installers generated by Squirrel.Windows Windows
  • High 7.8
    CVE-2022-46282

    Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having …

    Omron CX-Drive ICS / OT
  • High 7.5
    CVE-2022-47581

    Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.