Skip to content
OpenAdvisories

Archive

21 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /21 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-31267 EPSS 18%

    Unescaped control characters in Gitblit

    Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext 'attacker@example.com\n\trole = "#admin"' value.

    com.gitblit:gitblit Maven
  • Critical 9.0
    CVE-2022-1752

    Unrestricted Upload of File with Dangerous Type in polonel/trudesk

    Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.

    polonel polonel/trudesk
  • Critical 9.8
    CVE-2022-31259 EPSS 22%

    Access control bypass in beego

    The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1).

    github.com/beego/beego/v2 github.com/beego/beego github.com/astaxie/beego Go