Skip to content
OpenAdvisories

Archive

24 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /24 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Medium 5.5
    CVE-2020-36626

    Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection

    A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filtered_to_search_sql of the file ModularContent/SearchFilter.php. The manipulation leads to sql injection. It is possible t…

    Modern Tribe Panel Builder Plugin
  • Low 3.5
    CVE-2022-4728

    Graphite Web Cookie cross site scripting

    A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been d…

    Graphite Web graphite-web graphite-web Debian Ubuntu PyPI
  • Low 3.5
    CVE-2022-4730

    Graphite Web Absolute Time Range cross site scripting

    A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The e…

    Graphite Web graphite-web graphite-web Debian Ubuntu PyPI
  • Low 3.5
    CVE-2022-4729

    Graphite Web Template Name cross site scripting

    A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has b…

    Graphite Web graphite-web graphite-web Debian Ubuntu PyPI
  • Medium 4.7
    CVE-2022-4732 EPSS 38%

    Unrestricted Upload of File with Dangerous Type in microweber/microweber

    Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.

    microweber microweber/microweber microweber/microweber Packagist
  • Low 3.5
    CVE-2022-4727

    OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting

    A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/module/appointmentscheduling/AppointmentRequest.java of the com…

    openmrs Appointment Scheduling Module
  • Medium 6.7
    CVE-2022-4733

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.

    Open-Emr openemr/openemr
  • Medium 5.5
    CVE-2022-4725

    AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery

    A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to ser…

    com.amazonaws:aws-android-sdk-mobile-client Maven
  • Medium 6.3
    CVE-2022-4726

    SourceCodester Sanitization Management System Admin Login sql injection

    A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation of the argument username/password leads to sql inj…

    SourceCodester Sanitization Management System
  • High 7.1
    CVE-2022-46175 Public exploit

    Prototype Pollution in JSON5 via Parse Method

    JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `…

    json5 json5 js-jquery node-json5 Debian Ubuntu Azure Linux Wolfi npm
  • Medium 6.5
    CVE-2022-47933

    Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that refere…

  • Critical 9.8
    CVE-2022-47949 EPSS 23%

    The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remo…

  • Medium 6.5
    CVE-2022-47934

    Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a …

  • Medium 6.5
    CVE-2022-47932

    Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentio…