Skip to content
OpenAdvisories

Archive

3 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /3 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2022-29778 Public exploit

    D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the para…

  • High 8.1
    CVE-2022-24065

    Command Injection

    The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags ca…

    cookiecutter cookiecutter cookiecutter Debian Ubuntu PyPI
  • High 7.3
    CVE-2020-36542

    Demokratian install3.php privileges management

    A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed…

  • High 7.3
    CVE-2020-36541

    Demokratian genera_select.php sql injection

    A vulnerability was found in Demokratian. It has been rated as critical. Affected by this issue is some unknown functionality of the file basicos_php/genera_select.php. The manipulation of the argument id_provincia with the input -1%20union%20all%20select%201…

  • High 8.8
    CVE-2020-36529

    SevOne Network Management System Traceroute traceroute.php command injection

    A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible t…

    SevOne Network Management System
  • High 7.5
    CVE-2022-31028

    Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO

    MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with version RELEASE.2022-06-02T02-11-04Z, MinIO is vulnerable to an unending go-routine buildup while keeping connections established due to HTTP cl…

    minio minio