Skip to content
OpenAdvisories

Archive

25 August 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2022-31798 Public exploit Scanner template

    Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixatio…

  • Unscored —
    CVE-2022-31499 Public exploit Scanner template EPSS 65%

    Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via Read…

  • Unscored —
    CVE-2022-31269 Public exploit Scanner template

    Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to …

  • Unscored —
    CVE-2021-3929 Public exploit

    A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-202…

  • High 8.8
    CVE-2022-36804 Exploited Public exploit Scanner template EPSS 99%

    Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 be…

    KEV Sep 30, 2022
  • High 8.8
    CVE-2021-25642 Public exploit

    Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler

    ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users sho…