Skip to content
OpenAdvisories

Archive

23 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /23 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2022-29002

    Cross-Site Request Forgery in XXL-Job

    A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

    com.xuxueli:xxl-job Maven
  • High 7.4
    CVE-2022-1467

    AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere

    Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere appli…

    AVEVA AVEVA Plant SCADA Access Anywhere AVEVA InTouch Access Anywhere
  • High 8.8
    CVE-2021-32935

    Cognex In-Sight OPC Server - Deserialization of Untrusted Data

    The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation.

    Cognex In-Sight OPC Server
  • High 7.9
    CVE-2022-31466

    TOCTOU Vulnerability in Quick Heal Total Security

    Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between d…

  • High 7.9
    CVE-2022-31467

    DLL Hijacking Vulnerability in Quick Heal Total Security

    A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLL…

  • High 7.7
    CVE-2021-41714

    In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered use…