Skip to content
OpenAdvisories

Archive

8 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /8 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.9
    CVE-2022-36084

    cruddl vulnerable to AQL injection through flexSearch

    cruddl is software for creating a GraphQL API for a database, using the GraphQL SDL to model a schema. If cruddl starting with version 1.1.0 and prior to versions 2.7.0 and 3.0.2 is used to generate a schema that uses `@flexSearchFulltext`, users of that sche…

    AEB-labs cruddl cruddl npm
  • Critical 9.9
    CVE-2022-36100 EPSS 74%

    XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

    XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7 in XWiki Platform Applications Tag and prior to 13.10.6 and 14.4 in XWiki Platform Tag UI, the tags document `Main.Tag…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-tag-ui org.xwiki.platform.applications:xwiki-application-tag Maven
  • Critical 9.9
    CVE-2022-36099 EPSS 76%

    XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability

    XWiki Platform Wiki UI Main Wiki is software for managing subwikis on XWiki Platform, a generic wiki platform. Starting with version 5.3-milestone-2 and prior to versions 13.10.6 and 14.4, it's possible to inject arbitrary wiki syntax including Groovy, Python…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Maven
  • Critical 10.0
    CVE-2022-3167

    Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb

    Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Critical 10.0
    CVE-2022-27593 Exploited · Ransomware Scanner template EPSS 88%

    DeadBolt Ransomware

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QT…

    QNAP Systems Photo Station
    KEV Sep 8, 2022