Skip to content
OpenAdvisories

Archive

1 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /1 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

113 results · Feed

  • Unscored —
    CVE-2022-31952

    Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident.

  • Unscored —
    CVE-2022-31953

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?…

  • Unscored —
    CVE-2022-31956

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.ph…

  • Unscored —
    CVE-2022-31957

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view_team.php?id=.

  • Unscored —
    CVE-2022-31959

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage_team.php?id=.

  • Unscored —
    CVE-2022-31961

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage_incident.php?id=.

  • Unscored —
    CVE-2022-31962

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view_incident.php?id=.

  • Unscored —
    CVE-2022-31964

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent_types/view_respondent_t…

  • Unscored —
    CVE-2022-31965

    Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent_types/manage_responden…

  • High 7.6
    CVE-2021-27914

    A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject ex…

    Mautic Mautic
  • Unscored —
    CVE-2022-1949

    An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect …

    389-ds-base 389-ds-base Debian Ubuntu
  • High 7.8
    CVE-2021-26635

    Bandisoft ARK Library buffer overflow vulnerability

    In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, per…

    Bandisoft International ark library
  • Critical 9.8
    CVE-2021-26634

    Maxboard multiple vulnerabilities

    SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vuln…

    Max Yi MaxBoard
  • High 7.5
    CVE-2021-26633

    Maxboard SQL injection and LFI vulnerability

    SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file.

    Max Yi MaxBoard
  • Unscored —
    CVE-2020-20971

    Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.

  • Unscored —
    CVE-2021-33254

    An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a …

  • High —
    CVE-2021-34079

    Command injection in docker-tester

    OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.

    docker-tester npm
  • High 8.8
    CVE-2021-34078

    OS Command Injection in lifion-verify-deps

    lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.

    lifion-verify-deps npm
  • High —
    CVE-2021-34080

    OS Command injection in ssl-utils

    OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest() and the createCert() functions.

    ssl-utils npm
  • High 8.8
    CVE-2021-34081

    OS Command Injection in gitsome

    OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository.

    gitsome gitsome Ubuntu npm
  • High —
    CVE-2021-34082

    OS Command Injection in proctree

    OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.

    proctree npm
  • High —
    CVE-2021-34084

    OS Command Injection in s3-uploader

    OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commands via the metadata() function.

    s3-uploader npm
  • High 8.1
    CVE-2021-34083

    Command injection in google-it

    Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from g…

    google-it npm
  • Unscored —
    CVE-2022-30470

    In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file resul…

  • High 8.1
    CVE-2022-29098

    Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administr…

    Dell PowerScale OneFS
  • High 7.5
    CVE-2020-26185

    Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.

    Dell Dell BSAFE Micro Edition Suite
  • High 7.5
    CVE-2020-26184

    Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.

    Dell Dell BSAFE Micro Edition Suite
  • Unscored —
    CVE-2022-23237

    E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attack…

  • Unscored —
    CVE-2022-23236

    E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext wit…

  • High 7.8
    CVE-2022-30540

    Horner Automation Cscape Csfont

    The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

    Horner Automation Horner Automation Cscape Csfont
  • Unscored —
    CVE-2022-31342

    Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img.

  • High 7.8
    CVE-2022-29488

    Horner Automation Cscape Csfont

    The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.

    Horner Automation Horner Automation Cscape Csfont
  • High 7.8
    CVE-2022-28690

    Horner Automation Cscape Csfont

    The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

    Horner Automation Horner Automation Cscape Csfont
  • Unscored —
    CVE-2022-31343

    Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=.

  • High 7.8
    CVE-2022-27184

    Horner Automation Cscape Csfont

    The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

    Horner Automation Horner Automation Cscape Csfont
  • Unscored —
    CVE-2022-31344

    Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking.

  • Unscored —
    CVE-2022-31345

    Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=.

  • Unscored —
    CVE-2022-31346

    Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.

  • Unscored —
    CVE-2022-31347

    Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle.

  • Unscored —
    CVE-2022-31348

    Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=.