Skip to content
OpenAdvisories

Archive

16 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /16 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-37258

    steal vulnerable to Prototype Pollution

    Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.

    steal npm
  • Critical 9.8
    CVE-2022-3214

    Delta Electronics DIAEnergy Use of Hard-coded Credentials

    Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using ha…

    Delta Electronics DIAEnergy ICS / OT
  • Critical 9.8
    CVE-2022-39009

    The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause…

    Huawei HarmonyOS EMUI Network devices
  • Critical 9.8
    CVE-2022-39007

    The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerabil…

    Huawei HarmonyOS EMUI Network devices
  • Critical 9.1
    CVE-2022-39008

    The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability …

    Huawei HarmonyOS EMUI Network devices
  • Critical —
    GHSA-rc23-xxgq-x27g

    wee_alloc is Unmaintained

    Two of the maintainers have indicated that the crate may not be maintained. The crate has open issues including memory leaks and may not be suitable for production use. It may be best to switch to the default Rust standard allocator on wasm32 targets. Last re…

    wee_alloc crates.io
  • Critical —
    GHSA-vfv3-9w6v-23jp

    typemap is Unmaintained

    The maintainer seems unreachable. The crate may or may not be usable as-is despite no maintenance and may not work in future versions of Rust. The last release seems to have been seven years ago.

    typemap crates.io
  • Critical —
    GHSA-pp8r-vv2j-9j5v

    traitobject is Unmaintained

    Crate `traitobject` has not had a release for over five years. In addition there is an existing security advisory that has not been addressed: - [RUSTSEC-2020-0027](https://rustsec.org/advisories/RUSTSEC-2020-0027) ## Possible Alternative(s) The below list ha…

    traitobject crates.io
  • Critical 9.8
    CVE-2021-42949 Public exploit

    The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session t…

    hoteldruid hoteldruid Debian Ubuntu
  • Critical 9.8
    CVE-2022-25708

    Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivi…

    Qualcomm Snapdragon Connectivity, Snapdragon Mobile
  • Critical 9.0
    CVE-2022-25652

    Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

    Qualcomm Snapdragon Wired Infrastructure and Networking
  • Critical 9.4
    CVE-2022-22105

    Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon…

    Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music
  • Critical 10.0
    CVE-2022-26959

    There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version…