Skip to content
OpenAdvisories

Archive

9 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /9 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2022-36110

    Netmaker vulnerable to Insufficient Granularity of Access Control

    Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their au…

    gravitl netmaker github.com/gravitl/netmaker Go
  • High 7.5
    CVE-2022-31006

    Hyperledger Indy DOS vulnerability

    indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable …

    hyperledger indy-node indy-node PyPI
  • High 7.0
    CVE-2022-3133

    OS Command Injection in jgraph/drawio

    OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

    jgraph jgraph/drawio
  • High 8.8
    CVE-2022-38700

    multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

    OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

    OpenHarmony OpenHarmony
  • High 7.4
    CVE-2022-36423

    Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

    OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

    OpenHarmony OpenHarmony
  • High 8.8
    CVE-2022-38144

    WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress.

    gVectors Team wpForo Forum (WordPress plugin) Web / CMS
  • High 7.2
    CVE-2022-29061

    An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in…

    Fortinet Fortinet FortiSOAR Network devices
  • High 7.3
    CVE-2022-25765 Public exploit EPSS 43%

    Command Injection

    The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

    pdfkit RubyGems