Skip to content
OpenAdvisories

Archive

12 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /12 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

103 results · Feed

  • High 7.8
    CVE-2022-3977

    A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 6.5
    CVE-2022-3592

    A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esc…

    samba Alpine
  • Medium 5.3
    CVE-2022-3341

    A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fi…

    ffmpeg ffmpeg Debian Ubuntu
  • Medium 6.8
    CVE-2022-46367

    Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation

    Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.

    Rumpus FTP Server
  • Medium 6.8
    CVE-2022-46368

    Rumpus - FTP server Cross-site request forgery (CSRF) – Create user

    Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.

    Rumpus FTP Server
  • High 7.2
    CVE-2022-46472

    Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/cl…

  • Medium 6.8
    CVE-2022-46369

    Rumpus - FTP server Persistent cross-site scripting (PXSS) – Unspecified vector

    Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.

    Rumpus FTP Server
  • Medium 5.4
    CVE-2022-46503

    A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.…

  • Medium 5.4
    CVE-2022-46438

    A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows …

  • High 7.8
    CVE-2022-46623 Public exploit

    Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter.

  • Medium 5.3
    CVE-2022-46371

    Alotcer - AR7088H-A Information disclosure

    Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name.

    Alotcer AR7088H-A
  • High 7.3
    CVE-2022-46370

    Rumpus - FTP server Improper Token Verification

    Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.

    Rumpus FTP Server
  • High 7.2
    CVE-2022-46372

    Alotcer - AR7088H-A Authenticated Command execution

    Alotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow Authenticated command execution.

    Alotcer AR7088H-A
  • High 7.5
    CVE-2022-46463 Public exploit

    An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories wit…

  • Medium 6.1
    CVE-2022-46622 Public exploit

    A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web …

  • Medium 6.1
    CVE-2022-45729 Public exploit

    A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute a…

  • Medium 6.1
    CVE-2022-45728 Public exploit

    Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

  • High 7.5
    CVE-2022-25027

    The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authenticati…

  • High 7.5
    CVE-2022-25026 EPSS 24%

    A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sens…

  • Medium 5.4
    CVE-2022-42704

    A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebe…

  • Medium 5.5
    CVE-2022-47927

    An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When…

    mediawiki mediawiki Debian Ubuntu
  • Medium 5.4
    CVE-2022-47102 Public exploit

    A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute …

  • High 7.7
    CVE-2017-5242

    Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key

    Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.

    Rapid7 InsightVM Virtual Appliance Nexpose Virtual Appliance