Skip to content
OpenAdvisories

Archive

23 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /23 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

106 results · Feed

  • Medium 5.5
    CVE-2022-4698

    ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings

    The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, …

    Proper Fraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress Web / CMS
  • Medium 6.5
    CVE-2022-23547

    Heap buffer overflow in pjproject when decoding STUN message

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a cert…

    pjsip pjproject asterisk pjproject Debian Ubuntu
  • Medium 6.8
    CVE-2022-46171

    Tauri vulnerable to path traversal

    Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `?`, and `[...]` match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Sc…

    tauri-apps tauri tauri crates.io
  • High 7.5
    CVE-2022-33324

    Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series

    Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prio…

    Mitsubishi Electric MELSEC iQ-R Series R00CPU MELSEC iQ-R Series R08ENCPU MELSEC iQ-R Series R02CPU ICS / OT
  • Critical 9.1
    CVE-2022-28228

    Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would a…

  • High 7.5
    CVE-2022-28229

    The hash functionality in userver before 42059b6319661583b3080cab9b595d4f8ac48128 allows attackers to cause a denial of…

  • High 8.4
    CVE-2022-4724

    Improper Access Control in ikus060/rdiffweb

    Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 6.1
    CVE-2022-4720

    Open Redirect in ikus060/rdiffweb

    Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 8.3
    CVE-2022-4691

    Cross-site Scripting (XSS) - Stored in usememos/memos

    Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 7.6
    CVE-2022-4684

    Improper Access Control in usememos/memos

    Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 8.6
    CVE-2022-4686

    Authorization Bypass Through User-Controlled Key in usememos/memos

    Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 8.1
    CVE-2022-4687

    Incorrect Use of Privileged APIs in usememos/memos

    Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 7.1
    CVE-2022-4692

    Cross-site Scripting (XSS) - Stored in usememos/memos

    Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • Low 3.1
    CVE-2022-4665

    Unrestricted Upload of File with Dangerous Type in ampache/ampache

    Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.

    ampache ampache/ampache ampache Ubuntu
  • High 7.6
    CVE-2022-4695

    Cross-site Scripting (XSS) - Stored in usememos/memos

    Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 7.1
    CVE-2022-4690

    Cross-site Scripting (XSS) - Stored in usememos/memos

    Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 8.8
    CVE-2022-4688

    Improper Authorization in usememos/memos

    Improper Authorization in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • Medium 6.6
    CVE-2022-4721

    Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb

    Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.2
    CVE-2022-4722

    Authentication Bypass by Primary Weakness in ikus060/rdiffweb

    Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 5.7
    CVE-2022-4694

    Cross-site Scripting (XSS) - Stored in usememos/memos

    Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • Medium 5.7
    CVE-2022-4719

    Business Logic Errors in ikus060/rdiffweb

    Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 4.3
    CVE-2022-4683

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • Medium 6.3
    CVE-2022-4723

    Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 8.3
    CVE-2022-4689

    Improper Access Control in usememos/memos

    Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.

    usememos usememos/memos github.com/usememos/memos Go
  • High 7.2
    CVE-2022-38757

    CVE-2022-38757 ZENworks

    A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on…

    Micro Focus ZENworks Asset Management ZENworks Patch Management (ZPM) ZENworks Configuration Management (ZCM)
  • Medium 6.5
    CVE-2022-46492

    nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability vi…

  • High 7.2
    CVE-2022-46568

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountP…

  • High 7.2
    CVE-2022-46569

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key para…

  • High 7.2
    CVE-2022-46562

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK para…

  • High 7.2
    CVE-2022-46561

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password…

  • Critical 9.9
    CVE-2022-46641

    D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist …

  • High 7.2
    CVE-2022-46560

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password…

  • Critical 9.9
    CVE-2022-46642

    D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parame…

  • High 7.2
    CVE-2022-46563

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password…

  • High 7.2
    CVE-2022-46566

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password…

  • High 7.2
    CVE-2022-46570

    D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password…

  • Critical 9.8
    CVE-2022-45720

    IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameter…

  • Critical 9.8
    CVE-2022-45719

    IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAu…

  • Critical 9.8
    CVE-2022-45711 EPSS 20%

    IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in…

  • Critical 9.8
    CVE-2022-45714

    IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRule…