Skip to content
OpenAdvisories

Archive

May 2022

Vulnerabilities first published in this month (UTC), newest first.

← April 2022 2022 / May June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

483 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-21230

    Information Exposure

    This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure p…

  • Medium 6.5
    CVE-2022-23061

    Shopizer - IDOR delete superadmin

    In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability.

    shopizer-ecommerce Shopizer
  • Medium 4.8
    CVE-2022-23060

    Shopizer - Stored XSS in Manage Files

    A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab

    shopizer-ecommerce Shopizer