Skip to content
OpenAdvisories

Archive

19 July 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.0
    CVE-2022-31144 Public exploit

    Potential heap overflow in Redis

    Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7…

  • Unscored —
    CVE-2022-34024 Public exploit

    Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident modul…

  • Critical 9.8
    CVE-2022-35405 Exploited Public exploit Scanner template EPSS 100%

    Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote cod…

    KEV Sep 22, 2022
  • High 7.8
    CVE-2022-30526 Public exploit

    A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 …

  • High 7.5
    CVE-2022-34169 Public exploit EPSS 82%

    Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

    The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

  • Critical 9.8
    CVE-2022-24082 Public exploit EPSS 12%

    If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Int…