Skip to content
OpenAdvisories

Archive

12 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /12 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.3
    CVE-2022-39200

    Signature checks not applied to some retrieved missing events

    Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did not have their signatures verified correctly. This could potentially allow a remote homeserver to provide in…

    Matrix dendrite github.com/matrix-org/dendrite dendrite Alpine Go
  • High 8.5
    CVE-2022-29490

    A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role.

    Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi E…

    Hitachi Energy MicroSCADA X SYS600 ICS / OT
  • High 7.8
    CVE-2022-2979

    Omron CX-Programmer

    Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.

    Omron CX-Programmer ICS / OT
  • High 7.1
    CVE-2022-31226

    Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could pote…

    Dell CPG BIOS
  • High 7.5
    CVE-2022-1700

    Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Los…

    Forcepoint One Endpoint (F1E) with Policy Engine Email Security with DLP enabled Data Loss Prevention (DLP)
  • High 7.8
    CVE-2022-3178

    Buffer Over-read in gpac/gpac

    Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.

    gpac gpac/gpac gpac Ubuntu
  • High 7.5
    CVE-2022-37734

    graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

    graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9.

    com.graphql-java:graphql-java Maven