Skip to content
OpenAdvisories

Archive

29 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /29 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.8
    CVE-2022-38625

    Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware fi…

  • High 7.2
    CVE-2020-26938

    oauth2-server through 3.1.1 vulnerable to Open Redirect

    In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an incorrect URI pattern ("[a-zA-Z][a-zA-Z0-9+.-]+:") before making a redirection. This all…

    oauth2-server npm
  • High 7.5
    CVE-2022-36034

    Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js

    nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.

    cainthebest nitrado.js nitrado.js npm
  • High 8.3
    CVE-2022-27546

    HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability

    HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execu…

    HCL Software HCL iNotes
  • High 8.0
    CVE-2022-35962

    Crafted link in Zulip message can cause disclosure of credentials

    Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch w…

    zulip zulip-mobile
  • High 7.5
    CVE-2022-0934

    A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a c…

    dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2022-37681

    Hitachi Kokusai Electric Newtork products for monitoring system (Camera, Decoder and Encoder) and below allows attckers…

  • High 7.5
    CVE-2022-37680

    An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring syst…

  • High 7.1
    CVE-2022-3019

    Improper Access Control in tooljet/tooljet

    The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid on…

    ToolJet tooljet/tooljet
  • High 8.1
    CVE-2022-25921

    Arbitrary Code Execution

    All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor.

    morgan-json npm
  • High 7.8
    CVE-2021-41780

    Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use…

  • High 7.5
    CVE-2022-1199

    A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux