Skip to content
OpenAdvisories

Archive

19 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /19 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-38550

    A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to exe…

  • Medium 6.5
    CVE-2022-35068

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35067

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b0.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35066

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b8.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35065

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35064

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_mem…

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35063

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35062

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35061

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35060

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32.

    texlive-bin Debian
  • Medium 6.1
    CVE-2022-38527

    UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site…

  • Medium 5.3
    CVE-2022-29835

    WD Discovery's Use of Weak Hashing Algorithm for Code Signing

    WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact …

    Western Digital WD Discovery
  • Medium 5.5
    CVE-2022-37347

    Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerabili…

    Trend Micro Trend Micro Security (Consumer)
  • Medium 5.9
    CVE-2022-40608

    IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the …

    IBM Spectrum Protect Plus
  • Medium 5.9
    CVE-2022-40234

    Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a ce…

    IBM Spectrum Protect Plus
  • Medium 6.5
    CVE-2022-40713

    An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific end…

  • Medium 6.1
    CVE-2022-40712

    An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.

  • Medium 5.5
    CVE-2022-35709

    Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation…

    Adobe Bridge
  • Medium 5.5
    CVE-2022-38425

    Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation…

    Adobe Bridge