Skip to content
OpenAdvisories

Archive

2 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /2 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-24897 Public exploit

    Arbitrary filesystem write access from Velocity

    APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.3 and prior to 12.6.7, 12.10.3, and 13.0, the velocity scripts are not properly sandboxed against using the Java File API to perform read o…

    xwiki xwiki-commons org.xwiki.commons:xwiki-commons-velocity Maven
  • Unscored —
    CVE-2022-0952 Public exploit Scanner template EPSS 11%

    Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update

    The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could c…

    Web / CMS
  • Unscored —
    CVE-2022-29968 Public exploit

    An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of ki…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux