Skip to content
OpenAdvisories

Archive

13 January 2022

Vulnerabilities first published on this day (UTC), newest first.

21 results · Clear filters · Feed

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Conte…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Conte…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  • Low 3.3

    Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  • Low 3.3

    Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exp…

  • Low 3.7
    CVE-2022-23134 Exploited Public exploit Scanner template EPSS 95%

    Possible view of the setup pages by unauthenticated users if config file already exists

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

    KEV Feb 22, 2022
  • Low 3.3

    Incorrect permissions of [/var/run/zabbix] forces dac_override

    During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level