Skip to content
OpenAdvisories

Archive

22 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /22 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

32 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-23458

    Toast UI Grid vulnerable to Cross-site scripting

    Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

    NHN tui.grid tui-grid npm
  • Medium 6.1
    CVE-2022-40088

    Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the comp…

  • Medium 6.0
    CVE-2022-35894

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driv…

  • Medium 6.5
    CVE-2022-35039

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35038

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35037

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35036

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35035

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35034

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e7e3d.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35032

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35031

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35030

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35029

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35028

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35027

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35026

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35025

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35024

    OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35023

    OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x86_64-linux-gnu/libc.so.6+0xbb384.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35022

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35021

    OTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64/otfccdump+0x718693.

    texlive-bin Debian
  • Medium 5.3
    CVE-2021-39190

    SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

    The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.

    pluginsGLPI sccm
  • Medium 5.3
    CVE-2022-40444

    ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.

  • Medium 5.3
    CVE-2022-40443 Scanner template

    An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted G…

  • Medium 6.8
    CVE-2022-3267

    Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

    Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 6.1
    CVE-2022-2266

    Reflected XSS University Library Automation System

    University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2

    Yordam Bilgi Teknolojileri Yordam Bilgi Teknolojileri
  • Medium 6.1
    CVE-2022-39197 Exploited Public exploit EPSS 44%

    An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote at…

    KEV Mar 30, 2023
  • Medium 6.5
    CVE-2022-38512

    Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module

    The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page's XLIFF …

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.translation.web Maven
  • Medium 6.1
    CVE-2022-28980

    Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix

    Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix.

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.fragment.renderer.collection.filter.impl Maven
  • Medium 6.1
    CVE-2022-28977

    Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented

    HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allow…

    com.liferay.portal:release.portal.bom com.liferay.portal:release.dxp.bom com.liferay.portal:com.liferay.util.java Maven
  • Medium 5.3
    CVE-2022-38648

    PDFTranscoder does not block external resources

    Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

    Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven
  • Medium 5.3
    CVE-2022-38398

    Server-Side Request Forgery Information Disclosure Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

    Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven