Skip to content
OpenAdvisories

Archive

7 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /7 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-36587

    In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function…

  • Critical 9.8
    CVE-2022-36660

    xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().

  • Critical 9.6
    CVE-2022-3152

    Unverified Password Change in phpfusion/phpfusion

    Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20.

    Php-fusion phpfusion/phpfusion
  • Critical 9.1
    CVE-2022-31247

    Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)

    An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members, project-owner and manage project membe…

    SUSE Rancher github.com/rancher/rancher Go
  • Critical 9.9
    CVE-2021-36783

    Rancher: Failure to properly sanitize credentials in cluster template answers

    A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API …

    SUSE Rancher github.com/rancher/rancher Go
  • Critical 9.9
    CVE-2021-36782 Public exploit

    Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

    A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issu…

    SUSE Rancher github.com/rancher/rancher Go