Skip to content
OpenAdvisories

Archive

18 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /18 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36599

    OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

    lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

    omniauth ruby-omniauth ruby-omniauth Debian Ubuntu RubyGems
  • Critical 9.8
    CVE-2022-35540

    Use of Hard-coded Credentials in AgileConfig.Client

    Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.

    AgileConfig.Client NuGet
  • Critical 9.8
    CVE-2022-25899

    Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 ma…

  • Critical 9.8
    CVE-2022-22730

    Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthe…

    Browsers
  • Critical 9.0
    CVE-2022-35975

    Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode

    The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCod…

    weaveworks vscode-gitops-tools
  • Critical 9.8
    CVE-2022-30601

    Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated …