Skip to content
OpenAdvisories

Archive

31 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /31 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2022-2485

    AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

    Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

    Automation Direct SIO-MB08THMS SIO-MB12CDR SIO-MB04RTDS
  • Critical 10.0
    CVE-2022-21941

    iSTAR Ultra

    All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.

    Johnson Controls iSTAR Ultra
  • Critical 9.8
    CVE-2022-2466 Public exploit

    Quarkus does not terminate HTTP requests header context

    It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

    io.quarkus:quarkus-core-parent Maven
  • Critical 9.0
    CVE-2022-36045

    Account takeover via cryptographically weak PRNG in NodeBB Forum

    NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. `utils.generateUUID`, a helper function available in essentially all versio…

    NodeBB NodeBB nodebb npm
  • Critical 9.8
    CVE-2022-37021

    Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.

    Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 8. Any user still on Java 8 who wishes to protect against deserialization attacks involving JMX or RMI should upgr…

    Apache Software Foundation Apache Geode org.apache.geode:geode-core Maven