Skip to content
OpenAdvisories

Archive

24 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /24 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-32857

    This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Montere…

    Apple macOS watchOS tvOS macOS
  • Medium 5.5
    CVE-2022-32838

    A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 1…

    Apple macOS macOS
  • Medium 5.5
    CVE-2022-32834

    An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.5, macOS Big S…

    Apple macOS macOS
  • Medium 4.3
    CVE-2018-14519

    Kirby CMS 2.5.12 Cross-site Request Forgery

    An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.

    getkirby/cms Packagist
  • Medium 5.4
    CVE-2018-14520

    Kirby CMS 2.5.12 Cross-site Scripting

    An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

    getkirby/cms Packagist
  • Medium 5.9
    CVE-2021-43309

    ReDoS in uri-template-lite URI.expand function

    An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method

    uri-template-lite uri-template-lite uri-template-lite npm
  • Medium 5.5
    CVE-2022-2569

    ARC Informatique PcVue

    The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

    ARC Informatique PcVue 12 OAuth web service configuration PcVue 15 OAuth web service configuration
  • Medium 5.9
    CVE-2022-34836

    ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

    Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon r…

    ABB ABB Zenon ICS / OT
  • Medium 6.2
    CVE-2022-34837

    ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

    Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon.

    ABB ABB Zenon ICS / OT
  • Medium 5.3
    CVE-2021-4040

    org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write

    A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of mali…

    org.apache.activemq:artemis-core-client Maven
  • Medium 6.7
    CVE-2021-4178 Public exploit

    fabric8 kubernetes-client vulnerable

    A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

    io.fabric8:kubernetes-client Maven
  • Medium 5.4
    CVE-2022-38080

    exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability

    Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authe…

    Kajitori Exment exceedone/exment exceedone/laravel-admin Packagist
  • Medium 4.4
    CVE-2021-4037

    Kernel: security regression for cve-2018-13405

    A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a sc…

    Linux Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • Medium 5.3
    CVE-2021-4189

    A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The…

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu