Skip to content
OpenAdvisories

Archive

27 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /27 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.7
    CVE-2021-27862

    L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard-08
  • Medium 4.7
    CVE-2021-27861

    L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)

    IETF IEEE 802.2 draft-ietf-v6ops-ra-guard
  • Medium 4.7
    CVE-2021-27854

    L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation

    Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.

    IETF IEEE 802.2 P802.1Q
  • Medium 5.3
    CVE-2022-39835

    An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct…

    gajim gajim Debian Ubuntu
  • Medium 4.7
    CVE-2021-27853

    L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

    Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.

    IETF IEEE 802.2 P802.1Q
  • Medium 5.4
    CVE-2022-37028

    ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker…

  • Medium 5.4
    CVE-2022-38335

    Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template m…

  • Medium 6.5
    CVE-2022-40816

    Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that cust…

  • Medium 4.3
    CVE-2022-40817

    Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents …

  • Medium 5.4
    CVE-2022-38975

    EC-CUBE DOM-based cross-site scripting vulnerability

    DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.

    EC-CUBE EC-CUBE 4 series ec-cube/ec-cube Packagist
  • Medium 4.7
    CVE-2022-3303

    A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL po…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux