Skip to content
OpenAdvisories

Archive

25 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /25 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

232 results · Feed

  • Unscored —
    CVE-2022-36168

    A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:

  • Unscored —
    CVE-2022-36226

    SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.

  • Unscored —
    CVE-2021-3020

    An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (bui…

  • Unscored —
    CVE-2021-32570

    In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrie…

  • Unscored —
    CVE-2022-35192

    D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cau…

  • Unscored —
    CVE-2022-30984

    A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM …

  • Unscored —
    CVE-2022-29850

    Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to…

  • Unscored —
    CVE-2022-36121

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36120

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36119

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36118

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36117

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36116

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36115

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Medium 6.5
    CVE-2022-37316

    Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance…

  • High 7.0
    CVE-2022-37318

    Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated ma…

  • High 7.6
    CVE-2022-37317

    Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could pote…

  • Unscored —
    CVE-2022-28747

    Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. To expl…

  • Unscored —
    CVE-2022-31798 Public exploit Scanner template

    Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixatio…

  • Unscored —
    CVE-2022-31499 Public exploit Scanner template EPSS 65%

    Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via Read…

  • Unscored —
    CVE-2022-31269 Public exploit Scanner template

    Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to …

  • Unscored —
    CVE-2022-36721

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /a…

  • Unscored —
    CVE-2022-36720

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/m…

  • Unscored —
    CVE-2022-36719

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/h…

  • Unscored —
    CVE-2022-36715

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin…

  • Unscored —
    CVE-2022-36716

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/c…

  • Unscored —
    CVE-2021-43329

    A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated atta…

  • Unscored —
    CVE-2022-36697

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36696

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36695

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36692

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36693

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36700

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36701

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36698

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36703

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36699

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Medium 4.6
    CVE-2022-2997

    Session Fixation in snipe/snipe-it

    Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Unscored —
    CVE-2020-27802

    An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O…

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27801

    A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.

    upx-ucl upx-ucl upx Debian Ubuntu Alpine