Skip to content
OpenAdvisories

Archive

1 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /1 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-25767

    Remote Code Execution

    All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.

    com.bstek.ureport:ureport2-console Maven
  • Critical 9.8
    CVE-2022-24437

    Command Injection

    The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn(). However, the outpath …

    git-pull-or-clone npm
  • Critical 9.8
    CVE-2022-28481

    CSV-Safe improperly filters special characters potentially leading to CSV injection

    CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.

    csv-safe RubyGems