Skip to content
OpenAdvisories

Archive

8 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /8 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-36095

    XWiki Cross-Site Request Forgery (CSRF) for actions on tags

    XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Request Forgery (CSRF) attack for adding or removing tags on XWiki pages. The problem has been patched in XWiki 13.10.5 and 14.3. As a workar…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 4.0
    CVE-2022-22314

    IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system.…

    IBM Planning Analytics Workspace
  • Medium 4.3
    CVE-2022-20863

    Cisco Webex Meetings App Character Interface Manipulation Vulnerability

    A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software d…

    Cisco Cisco Webex Meetings Desktop App Network devices
  • Medium 4.0
    CVE-2022-20923

    Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability

    A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vul…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Medium 4.3
    CVE-2022-3138

    Cross-site Scripting (XSS) - Generic in jgraph/drawio

    Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

    jgraph jgraph/drawio
  • Medium 5.3
    CVE-2022-3148

    Cross-site Scripting (XSS) - Generic in jgraph/drawio

    Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

    jgraph jgraph/drawio
  • Medium 5.6
    CVE-2022-25914

    Remote Code Execution (RCE)

    The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.

    com.google.cloud.tools:jib-core Maven
  • Medium 5.9
    CVE-2022-25897

    Denial of Service (DoS)

    The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

    org.eclipse.milo:sdk-server Maven
  • Medium 6.1
    CVE-2022-3153

    NULL Pointer Dereference in vim/vim

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

    vim vim/vim vim vim Debian Ubuntu Azure Linux