Skip to content
OpenAdvisories

Archive

20 May 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2022-22972 Public exploit Scanner template EPSS 56%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability af…

  • High 7.5
    CVE-2022-24434 Public exploit

    Denial of Service (DoS)

    This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.

  • Medium 6.6
    CVE-2022-29170 Public exploit

    Grafana Enterprise datasource network restrictions bypass via HTTP redirects

    Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present…

  • Unscored —
    CVE-2022-31245 Public exploit

    mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admi…

  • Unscored —
    CVE-2022-30887 Public exploit EPSS 26%

    Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component…