Skip to content
OpenAdvisories

Archive

1 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /1 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2021-40822 Public exploit Scanner template EPSS 19%

    GeoServer allows SSRF via the option for setting a proxy host

    GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

    org.geoserver:gs-main Maven
  • Unscored —
    CVE-2021-31673 Public exploit

    A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows rem…

  • Unscored —
    CVE-2021-31674 Public exploit

    Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attack…

  • Medium 6.9
    CVE-2022-25842 Public exploit

    Arbitrary File Write via Archive Extraction (Zip Slip)

    All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can over…

    com.alibaba.oneagent:one-java-agent-plugin Maven