Skip to content
OpenAdvisories

Archive

2 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /2 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

93 results · Feed

  • Unscored —
    CVE-2022-32003

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.

  • Unscored —
    CVE-2022-32004

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=.

  • Unscored —
    CVE-2022-32005

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=.

  • Unscored —
    CVE-2022-32006

    Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=.

  • High 7.5
    GHSA-c8f7-x2g7-7fxj

    Phoenix-ws source code and data in extensions folder is publicly available

    ### Impact All of the source code, files, and folders in `phoenix_files/extensions/` are available to end users through a simple HTTP GET request. ### Patches The issue has been patched. The users of version 1.0.6 and above are not effected.

    phoenix-ws PyPI
  • Unscored —
    CVE-2022-29788

    libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability a…

    libmobi libmobi Debian Ubuntu
  • Unscored —
    CVE-2019-12350

    An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trai…

  • Unscored —
    CVE-2019-12349

    An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.

  • Unscored —
    CVE-2021-33615

    RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type.

  • Unscored —
    CVE-2019-12351

    An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailin…

  • High 7.8
    CVE-2022-1968

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu
  • Medium 6.1
    CVE-2022-29718

    Open redirect in caddy

    Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

    github.com/caddyserver/caddy/v2 github.com/caddyserver/caddy Go
  • Unscored —
    CVE-2022-26497

    BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The p…