Skip to content
OpenAdvisories

Archive

16 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /16 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.6
    CVE-2021-23267

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven
  • High 7.6
    CVE-2022-1728

    Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk

    Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.

    polonel polonel/trudesk
  • High 7.2
    CVE-2022-1718

    The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk

    The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can …

    polonel polonel/trudesk
  • High 8.8
    CVE-2022-0573

    JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead…

    jfrog JFrog Artifactory
  • High 8.8
    CVE-2022-1553

    Leaking password protected articles content due to improper access control in publify/publify

    Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, co…

    publify publify/publify publify_core RubyGems
  • High 7.5
    CVE-2022-1713 Scanner template

    SSRF on /proxy in jgraph/drawio

    SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1721

    Path Traversal in WellKnownServlet in jgraph/drawio

    Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1722

    SSRF in editor's proxy via IPv6 link-local address in jgraph/drawio

    SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

    jgraph jgraph/drawio
  • High 7.8
    CVE-2022-29623

    Connect-Multiparty allows arbitrary file upload

    An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.

    connect-multiparty npm
  • High 7.5
    CVE-2022-30781 Public exploit EPSS 88%

    Shell command injection in gitea

    Gitea before 1.16.7 does not escape git fetch remote.

    code.gitea.io/gitea gitea Alpine Go