Skip to content
OpenAdvisories

Archive

24 January 2023

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Critical 9.9
    CVE-2022-45808 Public exploit Scanner template

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection

    SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

  • Critical 9.3
    CVE-2022-47615 Public exploit Scanner template

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion

    Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

  • High 8.8
    CVE-2023-24422 Public exploit

    Sandbox bypass in Jenkins Script Security Plugin

    A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execut…

  • High 7.8
    CVE-2023-20904 Public exploit

    In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mism…

  • High 7.3
    CVE-2023-20921 Public exploit

    In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility se…

  • High 7.8
    CVE-2022-45639 Public exploit

    OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a cr…

  • High 7.8
    CVE-2022-20493 Public exploit

    In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. …

  • Medium 5.5
    CVE-2022-20494 Public exploit

    In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could…