Skip to content
OpenAdvisories

Archive

19 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /19 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2020-27792

    Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

    A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to me…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • High 8.8
    CVE-2022-36157

    Improper Privilege Management in com.xuxueli:xxl-job

    XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.

    com.xuxueli:xxl-job Maven
  • High 7.1
    CVE-2022-36008

    Message length overflow in frontier

    Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by …

    paritytech frontier fc-rpc crates.io
  • High 8.1
    CVE-2022-23459

    Double free or Use after Free in Value class of Jsonxx

    Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be …

    hjiang Jsonxx
  • High 8.2
    CVE-2022-22489

    IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack w…

    IBM MQ
  • High 8.8
    CVE-2022-0542

    Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot

    Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.

    chatwoot chatwoot/chatwoot
  • High 7.6
    CVE-2022-1021

    Insecure Storage of Sensitive Information in chatwoot/chatwoot

    Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.

    chatwoot chatwoot/chatwoot
  • High 8.8
    CVE-2022-35909

    Incorrect Access Control and Cross Site Scripting in Jellyfin

    In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.

    Jellyfin.Common NuGet
  • High 7.8
    CVE-2022-2889

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 9.0.0225.

    vim vim/vim vim vim Debian Ubuntu Azure Linux