Skip to content
OpenAdvisories

Archive

25 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /25 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.3
    CVE-2022-4739

    SourceCodester School Dormitory Management System Admin Login sql injection

    A vulnerability classified as critical was found in SourceCodester School Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation leads to sql injection. The attack can be laun…

    SourceCodester School Dormitory Management System
  • High 7.3
    CVE-2022-4737

    SourceCodester Blood Bank Management System login.php sql injection

    A vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attac…

    SourceCodester Blood Bank Management System
  • High 8.1
    CVE-2022-4734

    Improper Removal of Sensitive Information Before Storage or Transfer in usememos/memos

    Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.

    usememos usememos/memos github.com/usememos/memos Go
  • High 8.8
    CVE-2022-45893

    Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user…

  • High 7.5
    CVE-2022-45197

    Slixmpp lacks SSL Certificate hostname validation in XMLStream

    Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.

    slixmpp slixmpp slixmpp Debian Ubuntu PyPI
  • High 7.2
    CVE-2022-45889

    Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records…

  • High 8.8
    CVE-2022-40005 EPSS 35%

    Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by th…

  • High 7.5
    CVE-2022-44017

    An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can …

  • High 7.5
    CVE-2022-44016

    An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web…

  • High 8.6
    CVE-2022-41318

    A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection…

    squid squid3 squid squid Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-42953 Public exploit

    Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct …

  • High 8.8
    CVE-2022-42898

    PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

    samba krb5 samba samba Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2022-37706 Public exploit

    enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and t…

    e17 e17 Debian Ubuntu