Skip to content
OpenAdvisories

Archive

3 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /3 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-29773

    Access control issue in AlekSIS-Core

    An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set.

    aleksis-core PyPI
  • Medium 5.4
    CVE-2022-29770

    Cross site scripting in XXL-job

    XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.

    com.xuxueli:xxl-job Maven
  • Medium 6.3
    CVE-2020-36540

    Neetai Tech product.php sql injection

    A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the…

  • Medium 6.3
    CVE-2020-36539

    Lógico y Creativo sql injection

    A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely.

  • Medium 6.3
    CVE-2020-36538

    Eatan CMS sql injection

    A vulnerability was found in Eatan CMS. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The attack can be launched remotely.

    Eatan CMS
  • Medium 6.3
    CVE-2020-36537

    Everywhere CMS sql injection

    A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely.

    Everywhere CMS
  • Medium 6.3
    CVE-2020-36536

    Brandbugle main.php sql injection

    A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely.

  • Medium 6.3
    CVE-2020-36535

    MINMAX newsDia.php sql injection

    A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely.

  • Medium 4.3
    CVE-2020-36534

    easyii CMS out cross-site request forgery

    A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. The exploit has be…

    easyii CMS noumo/easyii Packagist
  • Medium 4.3
    CVE-2020-36532

    Klapp App Authorization Credentials information disclosure

    A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is reco…

    Klapp App
  • Medium 6.3
    CVE-2020-36531

    SevOne Network Management System Device Manager Page injection

    A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.

    SevOne Network Management System
  • Medium 6.3
    CVE-2020-36530

    SevOne Network Management System Alert Summary sql injection

    A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.

    SevOne Network Management System
  • Medium 5.5
    CVE-2020-36528

    Platinum Mobile MobileHandler.ashx access control

    A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. …

  • Medium 6.5
    CVE-2022-1988

    Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts

    Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.

    NeoRazorX neorazorx/facturascripts facturascripts/facturascripts Packagist