Skip to content
OpenAdvisories

Archive

2 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /2 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-30233

    A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated whe…

    Schneider Electric Wiser Smart ICS / OT
  • Medium 6.4
    CVE-2022-29085

    Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vuln…

    Dell Unity
  • Medium 6.4
    CVE-2022-26868

    Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated…

    Dell PowerStore
  • Medium 5.9
    CVE-2022-26867

    PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, wit…

    Dell PowerStore
  • Medium 5.5
    CVE-2022-26866

    Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged netwo…

    Dell PowerStore
  • Medium 6.5
    CVE-2022-31024

    Federated editing allows iframing remote servers by default in richdocuments

    richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versio…

    Nextcloud security-advisories
  • Medium 5.9
    CVE-2022-31023

    Dev error stack trace leaking into prod in Play Framework

    Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exceptio…

    playframework playframework com.typesafe.play:play_2.12 com.typesafe.play:play_2.13 Maven
  • Medium 5.4
    CVE-2022-30429

    Neos CMS vulnerable to XSS in various backend modules

    Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in v…

    neos/neos Packagist
  • Medium 4.3
    CVE-2022-1982

    A crafted SVG attachment can crash a Mattermost server

    Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.

    Mattermost Mattermost github.com/mattermost/mattermost-server Go
  • Medium 6.1
    CVE-2022-29718

    Open redirect in caddy

    Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

    github.com/caddyserver/caddy/v2 github.com/caddyserver/caddy Go