Skip to content
OpenAdvisories

Archive

2 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /2 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Unscored —
    CVE-2022-29063 Public exploit

    Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz

    The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or…

    Apache Software Foundation Apache OFBiz
  • Unscored —
    CVE-2022-25813 Public exploit EPSS 67%

    Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz

    In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manager needs to list the communications in t…

    Apache Software Foundation Apache OFBiz