Skip to content
OpenAdvisories

Archive

2 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /2 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

93 results · Feed

  • Unscored —
    CVE-2022-1716

    Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's pass…

  • Medium 4.3
    CVE-2022-1982

    A crafted SVG attachment can crash a Mattermost server

    Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.

    Mattermost Mattermost github.com/mattermost/mattermost-server Go
  • Unscored —
    CVE-2022-25163

    Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial num…

  • High 7.5
    CVE-2022-31018

    Denial of service binding form from JSON in Play Framework

    Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` m…

    playframework playframework com.typesafe.play:play_2.12 com.typesafe.play:play_2.13 Maven
  • Unscored —
    CVE-2022-29704

    BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability.

  • Unscored —
    CVE-2022-32019

    Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax…

  • Unscored —
    CVE-2022-32020

    Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/a…

  • Unscored —
    CVE-2022-32021

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movemen…

  • Unscored —
    CVE-2022-32022 Scanner template

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?ac…

  • Unscored —
    CVE-2022-32024 Scanner template

    Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.

  • Unscored —
    CVE-2022-32025 Scanner template

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?i…

  • Critical —
    GHSA-67r3-h899-9w95

    Embedded Malicious Code in ctx

    The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items() when instantiating Ctx objects.

    ctx PyPI
  • Unscored —
    CVE-2022-32026 Scanner template

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking…

  • Unscored —
    CVE-2022-32027

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page…

  • Unscored —
    CVE-2022-32028 Scanner template

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.ph…

  • Unscored —
    CVE-2022-32007 Scanner template

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=.

  • Unscored —
    CVE-2022-32008

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=.

  • Unscored —
    CVE-2022-32010

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=.

  • Unscored —
    CVE-2022-32011

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id…

  • Unscored —
    CVE-2022-32012

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/employee/index.php?view=edit&id=.

  • Unscored —
    CVE-2022-32013 Public exploit

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=.

  • Unscored —
    CVE-2022-32014

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction.

  • Unscored —
    CVE-2022-32015 Scanner template

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=.

  • Unscored —
    CVE-2022-32016

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany.

  • Unscored —
    CVE-2022-32017

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle.

  • Unscored —
    CVE-2022-32018 Scanner template

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=.

  • Unscored —
    CVE-2022-31985

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report…

  • Unscored —
    CVE-2022-31986

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental…

  • Unscored —
    CVE-2022-31988

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_repo…

  • Unscored —
    CVE-2022-31989

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=.

  • Unscored —
    CVE-2022-31990

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.

  • Unscored —
    CVE-2022-31991

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court.

  • Unscored —
    CVE-2022-31992

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_r…

  • Unscored —
    CVE-2022-31993

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service.

  • Unscored —
    CVE-2022-31994

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id.

  • Unscored —
    CVE-2022-31996

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=.

  • Unscored —
    CVE-2022-31998

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_…

  • Unscored —
    CVE-2022-32000

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manag…

  • Unscored —
    CVE-2022-32001

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.

  • Unscored —
    CVE-2022-32002

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=.