Skip to content
OpenAdvisories

Archive

14 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /14 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • Medium 4.8
    CVE-2022-36114

    Extracting malicious crates can fill the file system

    Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. An attacker could upload to an alternate registry a specially crafted package that extracts way mor…

    rust-lang cargo cargo cargo Debian Ubuntu crates.io
  • Medium 4.6
    CVE-2022-36113

    Extracting malicious crates can corrupt arbitrary files

    Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the ~/.cargo folder on disk, making it available to the Rust projects it builds. To record when an extraction is successful, Cargo w…

    rust-lang cargo cargo cargo Debian Ubuntu crates.io
  • Unscored —
    CVE-2022-3202

    A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This cou…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-2977

    A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized T…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2022-40674

    libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

    thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2022-40734 Scanner template

    UniSharp Laravel Filemanager directory traversal vulnerability

    UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.

    unisharp/laravel-filemanager Packagist
  • Unscored —
    CVE-2022-37661 Public exploit EPSS 35%

    SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

  • Unscored —
    CVE-2022-20231

    In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This co…

    Android
  • Unscored —
    CVE-2022-20364

    In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local…

    Android