Skip to content
OpenAdvisories

Archive

27 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /27 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2022-38794 Scanner template

    Zaver through 2020-12-15 allows directory traversal via the GET /.. substring.

  • Critical 9.8
    CVE-2022-38792

    exotel-py includes code execution backdoor inserted by a third party

    The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.

    exotel PyPI
  • Unscored —
    CVE-2022-2787

    stricter rules on chroot names

    Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.

    Debian schroot schroot schroot Debian Ubuntu
  • Low 3.5
    CVE-2022-3015

    oretnom23 Fast Food Ordering System cross site scripting

    A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue affects some unknown processing of the file admin/?page=reports. The manipulation of the argument date leads to cross site scripting. The a…

    oretnom23 Fast Food Ordering System
  • Low 3.5
    CVE-2022-3014

    SourceCodester Simple Task Managing System cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument student_add leads to cross site scripting. The attack can be initiated remotely. The i…

    SourceCodester Simple Task Managing System
  • Medium 6.3
    CVE-2022-3013

    SourceCodester Simple Task Managing System loginVaLidation.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the a…

    SourceCodester Simple Task Managing System
  • Medium 6.3
    CVE-2022-3012

    oretnom23 Fast Food Ordering System index.php sql injection

    A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The a…

    oretnom23 Fast Food Ordering System
  • Critical 9.1
    CVE-2019-15167

    The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a diffe…

    tcpdump tcpdump tcpdump Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-38791

    In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream …

    mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu