Skip to content
OpenAdvisories

Archive

August 2022

Vulnerabilities first published in this month (UTC), newest first.

← July 2022 2022 / August September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

2,333 results · Feed

  • Unscored —
    CVE-2022-36116

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Unscored —
    CVE-2022-36115

    An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue…

  • Medium 6.5
    CVE-2022-37316

    Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance…

  • High 7.0
    CVE-2022-37318

    Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated ma…

  • High 7.6
    CVE-2022-37317

    Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could pote…

  • Unscored —
    CVE-2022-28747

    Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. To expl…

  • Unscored —
    CVE-2022-31798 Public exploit Scanner template

    Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixatio…

  • Unscored —
    CVE-2022-31499 Public exploit Scanner template EPSS 65%

    Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via Read…

  • Unscored —
    CVE-2022-31269 Public exploit Scanner template

    Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to …

  • Unscored —
    CVE-2022-36721

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /a…

  • Unscored —
    CVE-2022-36720

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/m…

  • Unscored —
    CVE-2022-36719

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/h…

  • Unscored —
    CVE-2022-36715

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin…

  • Unscored —
    CVE-2022-36716

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/c…

  • Unscored —
    CVE-2021-43329

    A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated atta…

  • Unscored —
    CVE-2022-36697

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36696

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36695

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36692

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36693

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36700

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36701

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36698

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36703

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Unscored —
    CVE-2022-36699

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…

  • Medium 4.6
    CVE-2022-2997

    Session Fixation in snipe/snipe-it

    Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Unscored —
    CVE-2020-27802

    An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O…

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27801

    A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27800

    A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27799

    A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Ma…

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27798

    An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Ma…

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27797

    An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafte…

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27796

    A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a craft…

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2021-3914

    SmallRye Health UI Cross-site Scripting vulnerability

    It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.

    io.smallrye:smallrye-health-ui Maven
  • Unscored —
    CVE-2021-3929 Public exploit

    A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-202…

    qemu qemu qemu Virtualization Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-23172

    A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulne…

    sox sox sox Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-4112

    A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allow…

  • Unscored —
    CVE-2021-23159

    A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file.…

    sox sox sox sox Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-23210

    A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An att…

    sox sox sox Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-33844

    A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attack…

    sox sox sox sox Debian Ubuntu Azure Linux Alpine