13 July 2022

13 results · Clear filters · Feed

• Medium 5.5
  CVE-2022-34765

  A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware …

  Schneider Electric OPC UA Modicon Communication Module X80 advanced RTU Communication Module ICS / OT
  Jul 13, 2022
• Medium 5.9
  CVE-2022-34764

  A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…

  Schneider Electric OPC UA Modicon Communication Module X80 advanced RTU Communication Module ICS / OT
  Jul 13, 2022
• Medium 5.9
  CVE-2022-34763

  A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized…

  Schneider Electric OPC UA Modicon Communication Module X80 advanced RTU Communication Module ICS / OT
  Jul 13, 2022
• Medium 5.9
  CVE-2022-34762

  A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

  Schneider Electric X80 advanced RTU Communication Module OPC UA Modicon Communication Module ICS / OT
  Jul 13, 2022
• Medium 5.1
  CVE-2022-34758

  A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled i…

  Schneider Electric Easergy P5 ICS / OT
  Jul 13, 2022
• Medium 6.7
  CVE-2022-34757

  A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used f…

  Schneider Electric Easergy P5 ICS / OT
  Jul 13, 2022
• Medium 6.8
  CVE-2022-34754

  A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing cre…

  Schneider Electric Acti9 PowerTag Link C ICS / OT
  Jul 13, 2022
• Medium 6.5
  CVE-2022-31145

  Insufficient AccessToken Expiration Check in FlyteAdmin

  FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after…

  flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  Jul 13, 2022
• Medium 5.5
  CVE-2022-2380

  The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() fu…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jul 13, 2022
• Medium 5.4
  CVE-2022-34358

  IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

  IBM i
  Jul 13, 2022
• Medium 5.4
  CVE-2022-32065

  RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

  An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

  com.ruoyi:ruoyi Maven
  Jul 13, 2022
• Medium 6.5
  CVE-2019-10800

  Command Injection

  This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.

  codecov PyPI
  Jul 13, 2022
• Medium 4.6
  CVE-2022-32114 Public exploit

  Strapi 4.1.12 Cross-site Scripting via crafted file

  An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create (upload)" permission …

  @strapi/strapi npm
  Jul 13, 2022