Skip to content
OpenAdvisories

Archive

29 August 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2022-32548 Public exploit EPSS 34%

    An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bi…

  • Critical 9.8

    Arbitrary Code Execution

    All versions of package @pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function.

  • Critical 9.8

    Arbitrary Command Injection

    All versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_process.exec() function.

  • Critical 9.8
    CVE-2022-34668 Public exploit EPSS 12%

    NVFLARE unsafe deserialization due to Pickle

    NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrit…