Skip to content
OpenAdvisories

Archive

24 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /24 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-36626

    Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection

    A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filtered_to_search_sql of the file ModularContent/SearchFilter.php. The manipulation leads to sql injection. It is possible t…

    Modern Tribe Panel Builder Plugin
  • Medium 4.7
    CVE-2022-4732 EPSS 38%

    Unrestricted Upload of File with Dangerous Type in microweber/microweber

    Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 6.7
    CVE-2022-4733

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.

    Open-Emr openemr/openemr
  • Medium 5.5
    CVE-2022-4725

    AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery

    A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to ser…

    com.amazonaws:aws-android-sdk-mobile-client Maven
  • Medium 6.3
    CVE-2022-4726

    SourceCodester Sanitization Management System Admin Login sql injection

    A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation of the argument username/password leads to sql inj…

    SourceCodester Sanitization Management System
  • Medium 6.5
    CVE-2022-47933

    Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that refere…

  • Medium 6.5
    CVE-2022-47934

    Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a …

  • Medium 6.5
    CVE-2022-47932

    Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentio…