Skip to content
OpenAdvisories

Archive

3 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /3 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.4
    CVE-2022-35928

    AES Crypt for Linux Password Security Vulnerability

    AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prom…

    paulej AESCrypt
  • High 7.5
    CVE-2022-35867

    This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must f…

    xhyve xhyve
  • High 7.3
    CVE-2022-35865

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2…

    BMC Track-It!
  • High 7.2
    CVE-2022-34871

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 8.8
    CVE-2022-28684

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentic…

    DevExpress DevExpress
  • High 7.8
    CVE-2022-28668

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

    Sante DICOM Viewer Pro
  • High 7.2
    CVE-2022-27616

    Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi comp…

    Synology DiskStation Manager (DSM)
  • High 7.5
    CVE-2022-35737 Public exploit EPSS 24%

    `libsqlite3-sys` via C SQLite improperly validates array index

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

    qt5-qtwebengine sqlite3 sqlite3 sqlite Debian Ubuntu Azure Linux Alpine crates.io
  • High 8.8
    CVE-2022-36359

    Django vulnerable to Reflected File Download attack

    An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is der…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • High 7.1
    CVE-2022-31197

    SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc

    PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column n…

    pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Wolfi Maven