CVEs published August 16, 2022
166 CVEs were published on August 16, 2022: 4 critical, 9 high.
- Published
- 166
- Critical
- 4
- High
- 9
- Medium
- 15
- Low
- 3
- Unrated
- 135
- Now in CISA KEV
- 0
- Fix available
- 29
Most affected products
- Adobe Magento Commerce · magento/community-edition
- 7
- Airspan AirVelocity
- 7
- Esri Portal for ArcGIS
- 5
- Device42 CMDB
- 4
- Jason Gauci Eternal Terminal
- 4
- Blender
- 3
- IBM Sterling B2B Integrator
- 3
- Moodle
- 3
- Moodle · moodle/moodle
- 2
- MotoPress Timetable and Event Schedule
- 2
Critical 4
- CVE-2022-1399Remote code execution in scheduled tasks componentDevice42 CMDB
- CVE-2022-2662Sequi PortBloque S Improper AuthenticationSequi PortBloque S
- CVE-2022-2661Sequi PortBloque S Improper AuthorizationSequi PortBloque S
- CVE-2022-34253Adobe Commerce XML Injection Arbitrary code executionAdobe Magento Commerce · magento/community-edition
High 9
- CVE-2022-1410Remote Code Execution in Device42 ApplianceManager consoleDevice42 CMDB
- CVE-2022-1400Hardcoded encryption key IV in Exago WebReportsApi.dllDevice42 CMDB
- CVE-2022-37437Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validationSplunk Enterprise
- CVE-2022-34255Adobe Commerce Improper Access Control Privilege escalationAdobe Magento Commerce · magento/community-edition
- CVE-2022-34254Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code executionAdobe Magento Commerce · magento/community-edition
- CVE-2022-34256Adobe Commerce Improper Authorization Privilege escalationAdobe Magento Commerce · magento/community-edition
- CVE-2022-30576TIBCO Statistica Stored Cross Site Scripting (XSS) VulnerabilityTIBCO Software TIBCO Data Science - Workbench · TIBCO Softw…
- CVE-2022-30575TIBCO Statistica Reflected Cross Site Scripting (XSS) VulnerabilityTIBCO Software TIBCO Data Science - Workbench · TIBCO Softw…
- CVE-2022-38184There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1Esri Portal for ArcGIS
Medium, low and unrated 153
- CVE-2022-1401Insufficient validation of provided paths in Exago WrImageResource.axdDevice42 CMDB
- CVE-2022-25799An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0CERT/CC VINCE - The Vulnerability Information and Coordinat…
- CVE-2021-42052IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and th
- CVE-2022-38238XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.
- CVE-2022-38237XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.
- CVE-2022-38236XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
- CVE-2022-38235XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
- CVE-2022-38234XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
- CVE-2022-38233XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc.
- CVE-2022-38231XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.
- CVE-2022-38230XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc.
- CVE-2022-38228XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.
- CVE-2022-38229XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.
- CVE-2022-38227XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.
- CVE-2022-37781fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interc
- CVE-2022-36153tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const a
- CVE-2022-36151tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp.
- CVE-2022-36150tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp.
- CVE-2022-36149tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry().
- CVE-2022-36146SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[](unsigned long) at asan_new_delete.cpp.
- CVE-2022-36144SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode.
- CVE-2022-36145SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord().
- CVE-2022-36143SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sanitizer_common/sanitizer_common_
- CVE-2022-36142SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30().
- CVE-2022-36141SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::write(SWF::Writer*, SWF::Context*).
- CVE-2022-36140SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::write(SWF::Writer*, SWF::Context*).
- CVE-2022-35486OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.
- CVE-2022-36139SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char).
- CVE-2022-35484OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.
- CVE-2022-35485OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969.
- CVE-2022-35483OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8.
- CVE-2022-35482OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.
- CVE-2022-35481OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.
- CVE-2022-35471OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0.
- CVE-2022-35477OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954.
- CVE-2022-35479OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6.
- CVE-2022-35475OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8.
- CVE-2022-35470OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x65fc97.
- CVE-2022-35473OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7.
- CVE-2022-35469OTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6+0xbb384.
- CVE-2022-35466OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473.
- CVE-2022-35468OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e420d.
- CVE-2022-35467OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b8.
- CVE-2022-35465OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0414.
- CVE-2022-35464OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6171b2.
- CVE-2022-35462OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0bc3.
- CVE-2022-35463OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478.
- CVE-2022-35460OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f.
- CVE-2022-35461OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0a32.
- CVE-2022-35458OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05ce.
- CVE-2022-35459OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a.
- CVE-2022-35455OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0d63.
- CVE-2022-35456OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x617087.
- CVE-2022-35454OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05aa.
- CVE-2022-35453OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c08a6.
- CVE-2022-35451OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5.
- CVE-2022-35452OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c.
- CVE-2022-35450OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b84b1.
- CVE-2022-35448OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af.
- CVE-2022-35449OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0466.
- CVE-2022-35447OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b04de.
- CVE-2022-35434jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.
- CVE-2022-35433ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c.
- CVE-2022-35114SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c.
- CVE-2022-35113SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c.
- CVE-2022-35111SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at
- CVE-2022-35110SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.
- CVE-2022-35109SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c.
- CVE-2022-35108SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
- CVE-2022-35107SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c.
- CVE-2022-35105SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea.
- CVE-2022-35106SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksum(unsigned char*, int) at /
- CVE-2022-35104SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset() at /xpdf/Stream.cc.
- CVE-2022-35100SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxline_getbbox at /lib/gfxtools.c.
- CVE-2022-35101SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S.
- CVE-2022-35013PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp.
- CVE-2022-35012PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp.
- CVE-2022-35011PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.
- CVE-2022-35009PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
- CVE-2022-35010PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.
- CVE-2022-36155tifig v0.2.2 was discovered to contain a resource allocation issue via operator new(unsigned long) at asan_new_delete.cpp.
- CVE-2022-36152tifig v0.2.2 was discovered to contain a memory leak via operator new[](unsigned long) at /asan/asan_new_delete.cpp.
- CVE-2022-36148fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c.
- CVE-2022-35478OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.
- CVE-2022-35476OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.
- CVE-2022-35474OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e.
- CVE-2022-35472OTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693.
- CVE-2022-37393Zimbra zmslapd arbitrary module loadSynacor Zimbra Server
- CVE-2022-35008PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
- CVE-2022-35007PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc
- CVE-2022-35003JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.
- CVE-2022-35004JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.
- CVE-2022-35002JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.
- CVE-2022-35000JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.
- CVE-2022-34999JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.
- CVE-2022-34998JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.
- CVE-2022-37439Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring inputSplunk Enterprise · Splunk Universal Forwarders
- CVE-2022-37438Information disclosure via the dashboard drilldown in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2022-34259Adobe Commerce Improper Access Control Security feature bypassAdobe Magento Commerce · magento/community-edition
- CVE-2022-34257Adobe Commerce Stored XSS Arbitrary code executionAdobe Magento Commerce · magento/community-edition
- CVE-2022-34258Adobe Commerce Stored XSS Arbitrary code executionAdobe Magento Commerce · magento/community-edition
- CVE-2020-14379A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of serviceRed Hat AMQ
- CVE-2020-14320In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.Moodle · moodle/moodle
- CVE-2020-10728A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1.automationbroker/apb
- CVE-2020-1756In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.Moodle
- CVE-2020-1755In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote addreMoodle
- CVE-2022-2832A flaw was found in Blender 3.3.0.Blender
- CVE-2022-2833Endless Infinite loop in Blender-thumnailing due to logical bugs.Blender
- CVE-2022-2831A flaw was found in Blender 3.3.0.Blender
- CVE-2022-2847SourceCodester Guest Management System front.php sql injectionSourceCodester Guest Management System
- CVE-2022-2844MotoPress Timetable and Event Schedule Calendar cross site scriptingMotoPress Timetable and Event Schedule
- CVE-2022-2843MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scriptingMotoPress Timetable and Event Schedule
- CVE-2021-39087IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an auIBM Sterling B2B Integrator
- CVE-2021-39086IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtIBM Sterling File Gateway
- CVE-2021-39085IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to IBM Sterling B2B Integrator
- CVE-2021-39035IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to IBM Sterling B2B Integrator
- CVE-2022-38189There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.Esri Portal for ArcGIS
- CVE-2022-38192There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.Esri Portal for ArcGIS
- CVE-2022-38193Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)Esri Portal for ArcGIS
- CVE-2022-38194Portal for ArcGIS system properties are not properly encrypted (10.8.1 only)Esri Portal for ArcGIS
- CVE-2022-36242Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=.
- CVE-2022-38362Docker Provider <3.0 RCE vulnerability in example dagApache Software Foundation Apache Airflow · apache-airflow-…
- CVE-2022-36599Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.net.mingsoft:ms-mcms
- CVE-2022-36272Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.net.mingsoft:ms-mcms
- CVE-2022-36273Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg.
- CVE-2022-30264The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.
- CVE-2022-36530An issue was discovered in rageframe2 2.6.37.
- CVE-2021-30490upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Aut
- CVE-2022-29959Emerson OpenBSI through 2022-04-29 mishandles credential storage.
- CVE-2022-2838In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allThe Eclipse Foundation Eclipse Sphinx
- CVE-2022-36381OS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilegNintendo Co. Nintendo Wi-Fi Network Adaptor WAP-001
- CVE-2022-36344An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate JustSystems JUST Online Update for J-License'
- CVE-2022-36293Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to Nintendo Co. Nintendo Wi-Fi Network Adaptor WAP-001
- CVE-2022-35734'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service.HJ Holdings 'Hulu / フールー' App for Android
- CVE-2022-35239The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an inCONTEC CO. SolarView Compact
- CVE-2022-34156'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an eHJ Holdings 'Hulu / フールー' App for iOS
- CVE-2022-33939CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may leYokogawa Electric CENTUM VP / CS 3000 controller FCS
- CVE-2022-38216An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox producMapbox · com.mapbox.mapboxsdk:mapbox-android-core
- CVE-2022-36312Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI.Airspan AirVelocity
- CVE-2022-36311Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in thAirspan AirVelocity
- CVE-2022-36310Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker Airspan AirVelocity
- CVE-2022-36309Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter ofAirspan AirVelocity
- CVE-2022-36308Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores Airspan AirVelocity
- CVE-2022-36307The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot.Airspan AirVelocity
- CVE-2022-36306An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web seAirspan AirVelocity
- CVE-2022-24949A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0.Jason Gauci Eternal Terminal
- CVE-2020-10710A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer.foreman-installer
- CVE-2020-14321In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.Moodle · moodle/moodle
- CVE-2020-14322In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of deniMoodle
- CVE-2022-24950A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorizJason Gauci Eternal Terminal
- CVE-2022-24951A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enJason Gauci Eternal Terminal
- CVE-2022-24952Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalidJason Gauci Eternal Terminal
- CVE-2022-2846Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSSCalendar Event Multi View