Skip to content
OpenAdvisories

Archive

1 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /1 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-31183

    mTLS client verification is skipped in fs2 on Node.js

    fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode `TLSSocket` using `fs2-io` on Node.js, the parameter `requestCert = true` is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerabi…

    typelevel fs2 co.fs2:fs2-io_2.12 co.fs2:fs2-io_2.13 Maven
  • Critical 9.8
    CVE-2022-31181 Public exploit Scanner template

    Remote code execution in prestashop

    PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7.…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 9.8
    CVE-2022-31180

    Insufficient escaping of whitespace in shescape

    Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the `escape` or `escapeAll` functions with the `interpolation…

    ericcornelissen shescape shescape npm
  • Critical 9.8
    CVE-2022-2595

    Improper Authorization in kromitgmbh/titra

    Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.

    kromitgmbh kromitgmbh/titra
  • Critical 9.8
    CVE-2022-36301

    BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-f…

    Bosch BF-OS