Skip to content
OpenAdvisories

Archive

31 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /31 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-2898

    Measuresoft ScadaPro Server and Client Link Following

    Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow a denial-of-service condition.

    Measuresoft ScadaPro Server and Client
  • Medium 6.3
    CVE-2022-31233

    Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious use…

    Dell Unisphere for PowerMax
  • Medium 4.3
    CVE-2022-36048

    IP address leak via image proxy bypass in Zulip Server

    Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. When displaying messages with embedded remote images, Zulip normally loads the image preview via a go-camo proxy server. However, an attacker who can send…

    zulip zulip
  • Medium 5.3
    CVE-2022-36046

    Unexpected server crash in Next.js version 12.2.3

    Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandledRejection` exiting A…

    vercel next.js next nextjs npm PyPI
  • Medium 6.1
    CVE-2022-26331

    Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).

    Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions pr…

    Micro Focus Micro Focus ArcSight Logger
  • Medium 6.5
    CVE-2022-26330

    Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure.

    Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions pr…

    Micro Focus Micro Focus ArcSight Logger
  • Medium 5.5
    CVE-2022-2759

    Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions …

    Delta Electronics Delta Robot Automation Studio (DRAS) ICS / OT
  • Medium 6.5
    CVE-2022-2758

    Update

    Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions …

    LS Industrial Systems (LSIS) Co. Ltd LS Electric PLC: XGB-XBCH PLC: XGR-CPUH PLC: XGK-CPUU/H/A/S/E
  • Medium 6.5
    CVE-2022-37023

    Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11

    Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on Java 8 or Java 11. Any user wishing to protect against deserialization attacks involving REST APIs should upgrade to Apache Geode 1.15 and …

    Apache Software Foundation Apache Geode org.apache.geode:geode-core Maven