Skip to content
OpenAdvisories

Archive

10 August 2022

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • High 7.1

    Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user c…

  • High 8.5

    Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious…

  • High 7.4
    CVE-2022-20866 Public exploit EPSS 18%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability

    A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerabilit…

  • High 8.1
    CVE-2022-38129 EPSS 22%

    A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in …

  • High 8.6
    CVE-2022-0028 Exploited

    PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering

    A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (vi…

    KEV Aug 22, 2022
  • High 7.1
    CVE-2022-2756 Scanner template

    Server-Side Request Forgery (SSRF) in kareadita/kavita

    Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

  • High 7.5

    Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated re…

  • High 7.8

    A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.10…

  • High 7.8

    Arbitrary Command Execution

    All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument.