Skip to content
OpenAdvisories

Archive

14 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /14 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 4.3
    CVE-2022-2813

    SourceCodester Guest Management System cleartext storage

    A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-2…

    SourceCodester Guest Management System
  • High 7.3
    CVE-2022-2812

    SourceCodester Guest Management System index.php sql injection

    A vulnerability classified as critical was found in SourceCodester Guest Management System. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username/pass leads to sql injection. The attack can be initiated remot…

    SourceCodester Guest Management System
  • Low 3.5
    CVE-2022-2811

    SourceCodester Guest Management System myform.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unknown part of the file myform.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack…

    SourceCodester Guest Management System
  • Medium 6.1
    CVE-2022-36007 Public exploit

    Partial Path Traversal in com.github.jlangch:venice

    Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions `load-file` and `load-resource`. These functions can be limited to load files from a list of load paths. Assum…

    jlangch venice com.github.jlangch:venice Maven
  • High 7.9
    CVE-2022-36006

    Authenticated remote code execution due to insecure deserialization (GHSL-2022-063)

    Arvados is an open source platform for managing, processing, and sharing genomic and other large scientific and biomedical data. A remote code execution (RCE) vulnerability in the Arvados Workbench allows authenticated attackers to execute arbitrary code via …

    arvados arvados
  • High 7.9
    CVE-2022-35961

    ECDSA signature malleability in OpenZeppelin Contracts

    OpenZeppelin Contracts is a library for secure smart contract development. The functions `ECDSA.recover` and `ECDSA.tryRecover` are vulnerable to a kind of signature malleability due to accepting EIP-2098 compact signatures in addition to the traditional 65 b…

    OpenZeppelin openzeppelin-contracts @openzeppelin/contracts-upgradeable @openzeppelin/contracts npm