Skip to content
OpenAdvisories

Archive

12 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /12 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2022-36102

    Acess control list bypassed via crafted specific URLs

    Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update t…

    shopware shopware shopware/shopware Packagist
  • Medium 5.4
    CVE-2022-36101

    Sensitive data in backend customer module

    Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the backend administration contained sensitive data like the hashed password and the session ID. These fields are now explicitly unset in version …

    shopware shopware shopware/shopware Packagist
  • Medium 5.4
    CVE-2022-38135

    WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability

    Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings.

    Dean Oakley Photospace Gallery (WordPress plugin) Web / CMS