Skip to content
OpenAdvisories

Archive

August 2022

Vulnerabilities first published in this month (UTC), newest first.

← July 2022 2022 / August September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-2466 Public exploit

    Quarkus does not terminate HTTP requests header context

    It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

    io.quarkus:quarkus-core-parent Maven
  • Critical 10.0
    CVE-2022-32548 Public exploit EPSS 34%

    An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bi…

  • Critical 9.8
    CVE-2022-34668 Public exploit EPSS 12%

    NVFLARE unsafe deserialization due to Pickle

    NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrit…

    NVIDIA NVIDIA FLARE nvflare PyPI
  • Critical 9.8
    CVE-2022-37042 Exploited · Ransomware Public exploit Scanner template EPSS 92%

    Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts f…

    KEV Aug 11, 2022
  • Critical 9.8
    CVE-2022-34715 Public exploit EPSS 80%

    Windows Network File System Remote Code Execution Vulnerability

    Windows Network File System Remote Code Execution Vulnerability

    Microsoft Windows Server 2022 Windows
  • Critical 9.8
    CVE-2022-37434 Public exploit EPSS 19%

    zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

    openjpeg2 rsync fltk crash Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2022-2651 Public exploit EPSS 16%

    Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

    Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.

    bookwyrm-social bookwyrm-social/bookwyrm
  • Critical 9.8
    CVE-2022-31181 Public exploit Scanner template

    Remote code execution in prestashop

    PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7.…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist