Archive
20 May 2022
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability af…
-
High 7.5CVE-2022-24434 Public exploit
Denial of Service (DoS)
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.
-
Medium 6.6CVE-2022-29170 Public exploit
Grafana Enterprise datasource network restrictions bypass via HTTP redirects
Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present…
-
Unscored —CVE-2022-31245 Public exploit
mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admi…
-
Unscored —
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component…