Skip to content
OpenAdvisories

Archive

12 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /12 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

57 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-3573

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2022-3514

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions start…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2022-3437

    A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines…

    samba samba samba samba Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2022-3592

    A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esc…

    samba Alpine
  • Medium 5.3
    CVE-2022-3341

    A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fi…

    ffmpeg ffmpeg Debian Ubuntu
  • Medium 6.8
    CVE-2022-46367

    Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation

    Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.

    Rumpus FTP Server
  • Medium 6.8
    CVE-2022-46368

    Rumpus - FTP server Cross-site request forgery (CSRF) – Create user

    Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.

    Rumpus FTP Server
  • Medium 6.8
    CVE-2022-46369

    Rumpus - FTP server Persistent cross-site scripting (PXSS) – Unspecified vector

    Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.

    Rumpus FTP Server
  • Medium 5.4
    CVE-2022-46503

    A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.…

  • Medium 5.4
    CVE-2022-46438

    A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows …

  • Medium 5.3
    CVE-2022-46371

    Alotcer - AR7088H-A Information disclosure

    Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name.

    Alotcer AR7088H-A
  • Medium 6.1
    CVE-2022-46622 Public exploit

    A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web …

  • Medium 6.1
    CVE-2022-45729 Public exploit

    A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute a…

  • Medium 6.1
    CVE-2022-45728 Public exploit

    Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

  • Medium 5.4
    CVE-2022-42704

    A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebe…

  • Medium 5.5
    CVE-2022-47927

    An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When…

    mediawiki mediawiki Debian Ubuntu
  • Medium 5.4
    CVE-2022-47102 Public exploit

    A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute …