Skip to content
OpenAdvisories

Archive

27 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /27 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.8
    CVE-2022-40497

    Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code ex…

  • High 8.4
    CVE-2022-38932

    readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.

  • High 8.8
    CVE-2022-40878 EPSS 24%

    In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to ac…

  • High 8.1
    CVE-2022-39258 Scanner template

    mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

    mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credent…

    mailcow mailcow-dockerized
  • High 7.5
    CVE-2022-3323 EPSS 29%

    An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet…

  • High 7.2
    CVE-2022-40354

    Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parame…

  • High 7.2
    CVE-2022-40353

    Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parame…

  • High 7.2
    CVE-2022-40352

    Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parame…

  • High 8.8
    CVE-2022-37209 Public exploit

    JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filter…

  • High 8.8
    CVE-2022-31367

    Strapi mishandles hidden attributes within admin API responses

    Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.

    strapi @strapi/strapi npm
  • High 7.4
    CVE-2022-37193

    Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo …

  • High 8.8
    CVE-2022-41604

    Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs bec…

  • High 7.5
    CVE-2022-34326

    In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7…

  • High 7.8
    CVE-2022-3324

    Stack-based Buffer Overflow in vim/vim

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

    vim vim/vim vim vim Debian Ubuntu Azure Linux