Skip to content
OpenAdvisories

Archive

20 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /20 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 5.6
    CVE-2022-22365

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, …

    IBM WebSphere Application Server
  • Medium 6.4
    CVE-2021-39043

    IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerabi…

    IBM Jazz Team Server
  • Medium 5.9
    CVE-2022-29177

    DoS via malicious p2p message in Go-Ethereum

    Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.…

    ethereum go-ethereum github.com/ethereum/go-ethereum Go
  • Medium 6.6
    CVE-2022-29170 Public exploit

    Grafana Enterprise datasource network restrictions bypass via HTTP redirects

    Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present…

    Grafana Grafana grafana Web / CMS Alpine
  • Medium 5.0
    CVE-2022-29159

    Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck

    Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, and 1.6.1, an authenticated user can move stacks with cards from their own board to a board of another user. The Nextcloud Deck app contains …

    Nextcloud security-advisories
  • Medium 4.3
    CVE-2022-24905

    Argo CD login screen allows message spoofing if SSO is enabled

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is enabled.…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • Medium 4.3
    CVE-2022-24904

    Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write access to lea…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • Medium 6.3
    CVE-2022-1806

    Cross-site Scripting (XSS) - Reflected in rtxteam/rtx

    Cross-site Scripting (XSS) - Reflected in GitHub repository rtxteam/rtx prior to checkpoint_2022-05-18.

    rtxteam rtxteam/rtx
  • Medium 6.3
    CVE-2022-28985

    A stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to …