Skip to content
OpenAdvisories

Archive

August 2022

Vulnerabilities first published in this month (UTC), newest first.

← July 2022 2022 / August September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

412 results · Clear filters · Feed

  • High 7.5
    CVE-2022-31173

    Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

    Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should li…

    graphql-rust juniper juniper crates.io
  • High 7.2
    CVE-2022-31109

    HTTP Host Header Attack Vulnerability in laminas-diactoros

    laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can po…

    laminas laminas-diactoros laminas/laminas-diactoros Packagist
  • High 7.8
    CVE-2022-2581

    Out-of-bounds Read in vim/vim

    Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.

    vim vim/vim vim vim Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2022-2580

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.

    vim vim/vim vim vim Ubuntu Azure Linux
  • High 7.8
    CVE-2022-2571

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.

    vim vim/vim vim vim Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2022-36302

    File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the fi…

    Bosch BF-OS
  • High 7.5
    CVE-2022-2509

    A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification o…

    gnutls28 gnutls28 gnutls gnutls Debian Ubuntu Azure Linux Alpine
  • High 7.2
    CVE-2022-34154

    WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

    Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

    ideastocode Enable SVG, WebP & ICO Upload (WordPress plugin) Web / CMS
  • High 7.3
    CVE-2022-26310

    Improper Authorization in User Management to Vertical Privilege Escalation

    Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical …

    Artica PFMS Pandora FMS pandorafms-agent Ubuntu
  • High 7.2
    CVE-2022-36799 EPSS 47%

    This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has…

    Atlassian Jira Server Jira Data Center Web / CMS
  • High 7.4
    CVE-2022-35919 Public exploit EPSS 52%

    Authenticated requests for server update admin API allows path traversal in minio

    MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for `admin:ServerUpdate` can selectively trigger an error that in response, returns the content of the path req…

    minio minio
  • High 8.6
    CVE-2022-31188 Public exploit EPSS 48%

    Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

    CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in …

    cvat-ai cvat