Skip to content
OpenAdvisories

Archive

5 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /5 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2022-2321

    Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama

    Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

    heroiclabs heroiclabs/nakama github.com/heroiclabs/nakama/v3 Go
  • High 7.5
    CVE-2022-31116

    Incorrect handling of invalid surrogate pair characters in ujson

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were…

    ultrajson ultrajson ujson ujson Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2022-30290

    In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacke…

    pycti PyPI
  • High 7.5
    CVE-2022-2097 Public exploit

    AES OCB fails to encrypt some bytes

    AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  • High 8.2
    CVE-2022-2306

    Insufficient Session Expiration in heroiclabs/nakama

    Old session tokens can be used to authenticate to the application and send authenticated requests.

    heroiclabs heroiclabs/nakama github.com/heroiclabs/nakama Go
  • High 7.8
    CVE-2022-2304

    Stack-based Buffer Overflow in vim/vim

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2021-43116 Public exploit

    Use of Hard-coded Credentials in Nacos

    An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.

    com.alibaba.nacos:nacos-client Maven