Skip to content
OpenAdvisories

Archive

16 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /16 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.2
    CVE-2022-39210

    Access to internal files of the Nextcloud Android app

    Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not properly protected. As a result access to internal files of the from within the Nextcloud Android app is possibl…

    Nextcloud security-advisories
  • Low 3.0
    CVE-2022-39211

    Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server

    Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommend…

    Nextcloud security-advisories
  • Low —
    GHSA-3633-5h82-39pq

    Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata

    ### Issue If an attacker is able to control a threshold of keys to insert the same public key more than once with different key IDs into signed, trusted metadata on a TUF repository, then go-tuf [clients](https://github.com/theupdateframework/go-tuf#client) <…

    github.com/theupdateframework/go-tuf Go