Archive
10 August 2022
Vulnerabilities first published on this day (UTC), newest first.
30 results · Clear filters · Feed
-
Medium —
owning_ref vulnerable to multiple soundness issues
- `OwningRef::map_with_owner` is [unsound](https://github.com/Kimundi/owning-ref-rs/issues/77) and may result in a use-after-free. - `OwningRef::map` is [unsound](https://github.com/Kimundi/owning-ref-rs/issues/71) and may result in a use-after-free. - `Ownin…
-
Medium 5.3
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed te…
-
Medium 4.6
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by d…
-
Medium 4.4
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot c…
-
Medium 6.3
IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allo…
-
Medium 6.2
IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system …
-
Medium 6.5
WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability…
-
Medium 6.3
Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no…
-
Medium 4.3
Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could po…
-
Medium 6.1
Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary pa…
-
Medium 6.4
Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker wit…
-
Medium 5.4
Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could …
-
Medium 6.5
Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authentic…
-
Medium 4.3
Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker wit…
-
Medium 4.3
A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco …
-
Medium 4.3
Denial-of-Service (DoS) Vulnerability
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.
-
Medium 5.4CVE-2022-36923 Scanner template
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall A…
-
Medium 6.8
Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow…
-
Medium 6.5
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V…
-
Medium 6.8
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V…
-
Medium 5.3
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license ser…
-
Medium 5.3
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE W…
-
Medium 5.4
Cisco Webex Meetings Web Interface Vulnerabilities
Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilitie…
-
Medium 6.5
Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to delete arbitrary f…
-
Medium 4.9
Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to excessive verbosity in a specific REST API …
-
Medium 6.1
Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exist…
-
Medium 5.4
Cisco Webex Meetings Web Interface Vulnerabilities
Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilitie…
-
Medium 6.8
Improper input validation on HTTP/2 headers
Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
-
Medium 6.1CVE-2022-36801 EPSS 67%
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Medium 4.2
Protocol vs scheme mismatch
Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.