Skip to content
OpenAdvisories

Archive

9 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /9 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-25060

    WP-GraphQL < 0.3.5 - Improper Access Control

    The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a remote attacker could forge a GraphQL query to retrieve the account roles of every user on the site.

    wp-graphql/wp-graphql Web / CMS Packagist
  • Medium 4.6
    CVE-2022-22319

    IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could…

    IBM Robotic Process Automation Robotic Process Automation as a Service
  • Medium 5.9
    CVE-2021-20479

    IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could …

    IBM Cloud Pak System
  • Medium 6.8
    CVE-2022-1631 Public exploit

    Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber

    Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s E…

    microweber microweber/microweber microweber/microweber Packagist