Skip to content
OpenAdvisories

Archive

1 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /1 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium 4.9
    CVE-2022-23452

    openstack-barbican Denial of Service vulnerability

    An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service.

    barbican barbican barbican Debian Ubuntu PyPI
  • Medium 5.5
    CVE-2022-2806

    sosreport Exposure of Sensitive Information vulnerability

    It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

    sosreport sosreport sos Ubuntu Azure Linux PyPI
  • Medium 5.4
    CVE-2022-2256

    Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles

    A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.

    org.keycloak:keycloak-parent Maven
  • Medium 6.5
    CVE-2022-30614

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sendi…

    IBM Cognos Analytics
  • Medium 6.2
    CVE-2021-39045

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocompl…

    IBM Cognos Analytics
  • Medium 4.4
    CVE-2021-39009

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a loca…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2021-29823

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2021-20468

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2020-4301

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…

    IBM Cognos Analytics
  • Medium 6.1
    CVE-2022-36796

    WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

    Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at WordPress.

    CallRail CallRail Phone Call Tracking (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-36373

    WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress.

    Simon Ward MP3-jPlayer (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-36355

    WordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress.

    PluginlySpeaking Easy Org Chart (WordPress plugin) Web / CMS
  • Medium 6.5
    CVE-2022-28199

    NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, wher…

    NVIDIA NVIDIA FLARE dpdk dpdk Debian Ubuntu
  • Medium 6.5
    CVE-2022-36055

    Denial of service in Helm

    Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the _strvals_ package that can cause an out of memory panic. The _strvals_ package contains a …

    helm helm helm.sh/helm/v3 helm Azure Linux Go
  • Medium 6.8
    CVE-2022-36054

    Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (file os/net/ipv6/sicslowpan.c) contains an input function that processes incoming packets and copies …

    Contiki-NG Contiki-NG
  • Medium 5.9
    CVE-2022-36052

    Out-of-bounds read when decompressing UDP header

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer i…

    Contiki-NG Contiki-NG
  • Medium 5.9
    CVE-2022-36053

    Out-of-bounds read in the uIP buffer module

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module (os/net/ipv6/uipbuf.c) that processes IPv6 extension headers in incoming data packets. As part of…

    Contiki-NG Contiki-NG