Skip to content
OpenAdvisories

Archive

6 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /6 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-1368

    Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function

    The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monito…

    Cognex 3D-A1000 Dimensioning System
  • Critical 9.1
    CVE-2022-1525

    Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security

    The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code…

    Cognex 3D-A1000 Dimensioning System
  • Critical 9.8
    CVE-2022-36663 Public exploit

    Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter

    Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

    org.gluu:oxauth-common Maven
  • Critical 9.8
    CVE-2020-21516

    FeehiCMS has an arbitrary file upload vulnerability

    There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.

    feehi/cms Packagist
  • Critical 9.8
    CVE-2022-31860

    An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rul…

  • Critical 9.0
    CVE-2022-34882

    Information Exposure Vulnerability in RAID Manager Storage Replication Adapter

    Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to gain sensitive information. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 vers…

    Hitachi RAID Manager Storage Replication Adapter
  • Critical 9.8
    CVE-2022-34747

    A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to ac…

    Zyxel Zyxel NAS326 firmware Network devices
  • Critical 10.0
    CVE-2022-36067 Public exploit EPSS 48%

    vm2 vulnerable to Sandbox Escape before v3.9.11

    vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerabil…

    patriksimek vm2 vm2 npm