Skip to content
OpenAdvisories

Archive

5 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /5 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2022-2830

    Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)

    Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the environment. This issue affects: Bitdefender GravityZone Console On-Premise versions prior…

    Bitdefender GravityZone Console On-Premise GravityZone Cloud Console
  • High 7.5
    CVE-2022-38370

    No authorization of DatabaseConnectController in grafana-connector.

    Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

    Apache Software Foundation Apache IoTDB org.apache.iotdb:iotdb-grafana-connector Maven
  • High 8.8
    CVE-2022-38369

    Login check vulnerability by session Id

    Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.

    Apache Software Foundation Apache IoTDB apache-iotdb org.apache.iotdb:iotdb-server Maven PyPI
  • High 8.1
    CVE-2022-3008

    Command Injection on tinygltf

    The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input …

    syoyo tinygltf tinygltf tinygltf Debian Ubuntu
  • High 7.3
    CVE-2022-3120

    SourceCodester Clinics Patient Management System Login index.php sql injection

    A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument user_name leads to …

    SourceCodester Clinics Patient Management System
  • High 8.8
    CVE-2022-30331

    The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language…

    pytigergraph PyPI