Skip to content
OpenAdvisories

Archive

2 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /2 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.3
    CVE-2022-30238

    A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account whe…

    Schneider Electric Wiser Smart ICS / OT
  • High 8.2
    CVE-2022-30237

    A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be …

    Schneider Electric Wiser Smart ICS / OT
  • High 8.2
    CVE-2022-30236

    A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when a…

    Schneider Electric Wiser Smart ICS / OT
  • High 8.6
    CVE-2022-30235

    A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized…

    Schneider Electric Wiser Smart ICS / OT
  • High 8.0
    CVE-2022-30232

    A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attac…

    Schneider Electric Power Logic ION Setup ICS / OT
  • High 7.4
    CVE-2022-31459

    Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth.

  • High 7.4
    CVE-2022-31461

    Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 messa…

  • High 8.2
    CVE-2022-31463

    Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authenticati…

  • High 7.4
    CVE-2022-31460

    Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a ce…

  • High 8.1
    CVE-2022-29084

    Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication att…

    Dell Unity
  • High 7.5
    CVE-2022-22557

    PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x…

    Dell PowerStore
  • High 7.5
    CVE-2022-31018

    Denial of service binding form from JSON in Play Framework

    Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` m…

    playframework playframework com.typesafe.play:play_2.12 com.typesafe.play:play_2.13 Maven
  • High 7.5
    GHSA-c8f7-x2g7-7fxj

    Phoenix-ws source code and data in extensions folder is publicly available

    ### Impact All of the source code, files, and folders in `phoenix_files/extensions/` are available to end users through a simple HTTP GET request. ### Patches The issue has been patched. The users of version 1.0.6 and above are not effected.

    phoenix-ws PyPI
  • High 7.8
    CVE-2022-1968

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu