Skip to content
OpenAdvisories

Archive

3 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /3 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 10.0
    CVE-2022-43931 EPSS 17%

    Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4…

    Synology VPN Plus Server
  • Critical 9.8
    CVE-2022-39041

    aEnrich a+HRD - SQL Injection

    aEnrich a+HRD has insufficient user input validation for specific API parameter. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

    aEnrich a+HRD
  • Critical 9.8
    CVE-2022-39042

    aEnrich a+HRD - Improper Authentication

    aEnrich a+HRD has improper validation for login function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access API function to perform arbitrary system command or disrupt service.

    aEnrich a+HRD
  • Critical 9.8
    CVE-2022-39039

    aEnrich a+HRD - Server-Side Request Forgery (SSRF)

    aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command o…

    aEnrich a+HRD
  • Critical 9.8
    CVE-2022-38627 Scanner template

    Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered…

  • Critical 9.8
    CVE-2022-32665

    In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of…

    MediaTek EN7528, EN7580
  • Critical 9.8
    CVE-2022-47618

    Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials

    Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service.

    MERIT LILIN ENT.CO.,LTD. AH55B08 DVR firmware AH55B04 DVR firmware
  • Critical 9.8
    CVE-2021-32824

    Regular expression Denial of Service in MooTools

    Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Han…

    Apache Dubbo org.apache.dubbo:dubbo-parent Maven