Skip to content
OpenAdvisories

Archive

16 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /16 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-1399

    Remote code execution in scheduled tasks component

    An Argument Injection or Modification vulnerability in the "Change Secret" username field as used in the Discovery component of Device42 CMDB allows a local attacker to run arbitrary code on the appliance with root privileges. This issue affects: Device42 CMD…

    Device42 CMDB
  • Critical 9.6
    CVE-2022-2662

    Sequi PortBloque S Improper Authentication

    Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device.

    Sequi PortBloque S
  • Critical 9.9
    CVE-2022-2661

    Sequi PortBloque S Improper Authorization

    Sequi PortBloque S has an improper authorization vulnerability, which may allow a low-privileged user to perform administrative functions using specifically crafted requests.

    Sequi PortBloque S
  • Critical 9.1
    CVE-2022-34253

    Adobe Commerce XML Injection Arbitrary code execution

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote cod…

    Adobe Magento Commerce magento/community-edition Web / CMS Packagist
  • Critical 9.8
    CVE-2022-36599

    Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List

    Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.

    net.mingsoft:ms-mcms Maven
  • Critical 9.8
    CVE-2022-36272

    Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter

    Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.

    net.mingsoft:ms-mcms Maven