Skip to content
OpenAdvisories

Archive

19 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /19 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-35692

    Adobe Commerce Improper Access Control Security feature bypass

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor…

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Medium 5.9
    CVE-2022-2793

    Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrit…

    Emerson Electric Proficy Machine Edition
  • Medium 4.7
    CVE-2022-2789

    Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of…

    Emerson Electric Proficy Machine Edition
  • Medium 5.9
    CVE-2022-2790

    Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cry…

    Emerson Electric Proficy Machine Edition
  • Medium 6.6
    CVE-2022-2792

    Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and…

    Emerson Electric Proficy Machine Edition
  • Medium 6.5
    CVE-2022-36031

    Unhandled exception on illegal filename_disk value

    Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the `filename_disk` value to a folder and accessing that file through the `/assets` endpoint. This vulner…

    directus directus directus npm
  • Medium 5.0
    CVE-2022-36009

    Incorrect parsing of access level in gomatrixserverlib and dendrite

    gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of the `m.room.power_l…

    Matrix gomatrixserverlib github.com/matrix-org/dendrite github.com/matrix-org/gomatrixserverlib Go
  • Medium 5.9
    CVE-2022-23460

    Stack overflow in Jsonxx

    Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx librar…

    hjiang Jsonxx
  • Medium 5.0
    CVE-2022-2886

    Laravel deserialization

    A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used…