Archive

3 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /3 September 2022 →

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

Medium 5.3

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.

HCL Software HCL Launch

Aug 3, 2022
Medium 5.8

CVE-2022-31175

Cross-site scripting caused by the editor instance destroying process in ckeditor5

CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions prior to 35.0.1. The vulnerability allowed to trigger a JavaScript code after fulfilling special c…

ckeditor ckeditor5 request-tracker4 ldap-account-manager Ubuntu npm

Aug 3, 2022
Medium 4.1

CVE-2022-37396

In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

JetBrains Rider

Aug 3, 2022
Medium 5.3

CVE-2022-35864

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!…

BMC Track-It!

Aug 3, 2022
Medium 6.5

CVE-2022-34872

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Aut…

Centreon Centreon

Aug 3, 2022
Medium 4.3

CVE-2022-23442

An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.…

Fortinet Fortinet FortiOS Network devices

Aug 3, 2022
Medium 5.4

CVE-2022-27484

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authentica…

Fortinet Fortinet FortiADC Network devices

Aug 3, 2022
Medium 5.5

CVE-2022-27621

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology USB Copy

Aug 3, 2022
Medium 6.8

CVE-2022-27620

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology SSO Server

Aug 3, 2022
Medium 6.8

CVE-2022-27619

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Cli…

Synology Synology Note Station Client

Aug 3, 2022
Medium 4.3

CVE-2022-36800

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Brows…

Atlassian Jira Service Management Data Center Jira Service Management Server Web / CMS

Aug 3, 2022
Medium 6.8

CVE-2022-27618

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Storage Analyzer

Aug 3, 2022
Medium 5.0

CVE-2022-27617

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Synology Calendar

Aug 3, 2022