Skip to content
OpenAdvisories

Archive

22 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /22 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-23513 Public exploit EPSS 42%

    Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint

    Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. …

    pi-hole AdminLTE
  • High 8.8
    CVE-2022-28281 Public exploit

    If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent p…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  • High 8.8
    CVE-2022-1802 Public exploit EPSS 28%

    If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could hav…

    Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  • High 8.8
    CVE-2022-26485 Exploited Public exploit EPSS 14%

    Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

    Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
    KEV Mar 7, 2022
  • Medium 5.4
    CVE-2022-43271 Public exploit

    Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerabil…

  • Medium 5.4
    CVE-2021-43657 Public exploit

    A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (S…