Skip to content
OpenAdvisories

Archive

25 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /25 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-37316

    Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance…

  • Medium 4.6
    CVE-2022-2997

    Session Fixation in snipe/snipe-it

    Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Medium 6.1
    CVE-2021-3914

    SmallRye Health UI Cross-site Scripting vulnerability

    It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.

    io.smallrye:smallrye-health-ui Maven
  • Medium 5.4
    CVE-2022-36527

    Jfinal Cross-site Scripting vulnerability

    Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.

    com.jflyfox:jflyfox_jfinal Maven
  • Medium 6.7
    CVE-2022-20865

    Cisco FXOS Software Command Injection Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is d…

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • Medium 4.7
    CVE-2022-37952

    WorkstationST - Reflected XSS in iHistorian Data Display Tags

    A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser. WorkstationST is only deployed in specific, controlled environments rendering at…

    GE Gas Power WorkstationST
  • Medium 4.7
    CVE-2022-37953

    WorkstationST - Response Splitting in AM Gateway Challenge-Response

    An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments…

    GE Gas Power WorkstationST
  • Medium 5.4
    CVE-2022-36358

    WordPress SEO Scout plugin <= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in SEO Scout plugin <= 0.9.83 at WordPress allows attackers to trick users with administrative rights to unintentionally change the plugin settings.

    SEO Scout SEO Scout
  • Medium 6.1
    CVE-2022-2463

    ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the …

    Rockwell Automation ISaGRAF Workbench ICS / OT
  • Medium 6.3
    CVE-2022-2957

    SourceCodester Simple and Nice Shopping Cart Script profile.php sql injection

    A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation of the argument mem_id leads to sql injec…

    SourceCodester Simple and Nice Shopping Cart Script
  • Medium 4.3
    CVE-2022-32742

    A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enou…

    samba samba samba samba Debian Ubuntu Azure Linux Alpine
  • Medium 6.3
    CVE-2022-2980

    NULL Pointer Dereference in vim/vim

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine