Skip to content
OpenAdvisories

Archive

1 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /1 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2022-31195 Public exploit

    Path traversal vulnerability in Simple Archive Format package import in DSpace

    DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF (simple archive format) pack…

    DSpace DSpace org.dspace:dspace-api Maven
  • High 7.1
    CVE-2022-31192 Public exploit

    Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a …

    DSpace DSpace org.dspace:dspace-jspui Maven
  • High 8.2
    CVE-2022-31194 Public exploit

    Path traversal vulnerabilities in DSpace JSPUI submission upload

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to m…

    DSpace DSpace org.dspace:dspace-jspui Maven
  • Critical 9.8
    CVE-2022-31181 Public exploit Scanner template

    Remote code execution in prestashop

    PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7.…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Unscored —
    CVE-2022-21789 Public exploit

    In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of pri…

    MediaTek MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8512A, MT8518, MT8791, MT8797, MT8798
  • Unscored —
    CVE-2022-27255 Public exploit EPSS 37%

    In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer ove…

  • High 7.4
    CVE-2022-35919 Public exploit EPSS 52%

    Authenticated requests for server update admin API allows path traversal in minio

    MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for `admin:ServerUpdate` can selectively trigger an error that in response, returns the content of the path req…

    minio minio
  • High 8.6
    CVE-2022-31188 Public exploit EPSS 48%

    Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

    CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in …

    cvat-ai cvat