Skip to content
OpenAdvisories

Archive

26 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /26 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-28509

    TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP

    This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec …

    Arista Networks Arista EOS Arista TerminAttr Network devices
  • Medium 6.8
    CVE-2021-28508

    TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP

    This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec s…

    Arista Networks Arista EOS Arista TerminAttr Network devices
  • Medium 5.5
    CVE-2022-26767

    The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 1…

    Apple macOS macOS
  • Medium 5.5
    CVE-2022-26766 Public exploit

    A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 1…

    Apple watchOS
  • Medium 4.7
    CVE-2022-26765

    A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monte…

    Apple watchOS
  • Medium 4.7
    CVE-2022-26764

    A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS …

    Apple watchOS
  • Medium 6.5
    CVE-2022-30585

    The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) contains an Authorization Bypass Vulnerability. A remote aut…

  • Medium 5.5
    CVE-2022-22674 Exploited

    An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…

    Apple macOS macOS
    KEV Apr 4, 2022
  • Medium 5.8
    CVE-2022-1261

    Matrikon OPC Server Improper Access Control

    Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level…

    Matrikon, a subsidiary of Honeywell Matrikon OPC Server
  • Medium 5.3
    CVE-2022-29091

    Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vu…

    Dell Unity
  • Medium 6.8
    CVE-2022-26865

    Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticate…

    Dell Dell OS Recovery Tool
  • Medium 6.5
    CVE-2022-20821 Exploited EPSS 11%

    Cisco IOS XR Software Health Check Open Port Vulnerability

    A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV May 23, 2022
  • Medium 4.3
    CVE-2022-20809

    Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

    Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an aff…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Medium 5.3
    CVE-2021-34360

    CSRF Bypass in Proxy Server

    A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versio…

    QNAP Systems Proxy Server
  • Medium 6.1
    CVE-2022-27777

    XSS Vulnerability in Action View tag helpers

    A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.

    rails rails redmine actionview Debian Ubuntu RubyGems
  • Medium 6.7
    CVE-2022-30789

    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30788

    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30786

    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30784

    A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2022-22577

    Cross-site Scripting Vulnerability in Action Pack

    An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

    rails rails actionpack Debian Ubuntu RubyGems