Skip to content
OpenAdvisories

Archive

22 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /22 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2022-2552 Public exploit Scanner template EPSS 12%

    Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure

    The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

    Web / CMS
  • Unscored —
    CVE-2022-2551 Public exploit Scanner template EPSS 18%

    Duplicator < 1.4.7 - Unauthenticated Backup Download

    The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site b…

    Web / CMS
  • Low 2.7
    CVE-2022-2841 Public exploit

    CrowdStrike Falcon Uninstallation authorization

    A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible…

    CrowdStrike Falcon
  • Unscored —
    CVE-2022-35583 Public exploit EPSS 17%

    wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by inj…

    wkhtmltopdf wkhtmltopdf Debian Ubuntu
  • Unscored —
    CVE-2022-28598 Public exploit

    Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-contr…