Skip to content
OpenAdvisories

Archive

28 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /28 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.3
    CVE-2022-31628

    phar wrapper can occur dos when using quine gzip file

    In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Low 3.3
    CVE-2022-40708

    An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows…

    Trend Micro Trend Micro Deep Security
  • Low 3.7
    CVE-2022-34394

    Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unau…

    Dell Dell Networking OS10
  • Low 3.3
    CVE-2022-38934

    readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.

  • Low 3.5
    CVE-2022-3354

    Open5GS UDP Packet ogs-tlv-msg.c denial of service

    A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit h…

  • Low 2.7
    CVE-2022-28815

    SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy

    In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – EDP version UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server
  • Low 3.5
    CVE-2022-3333

    Zephyr Project Manager REST Call cross site scripting

    A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to…

    Zephyr Project Manager
  • Low 3.7
    CVE-2021-43980

    Apache Tomcat: Information disclosure

    The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven