Skip to content
OpenAdvisories

Archive

3 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /3 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Unscored —
    CVE-2021-42886

    TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib con…

  • Unscored —
    CVE-2021-42885

    TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file g…

  • Unscored —
    CVE-2021-42884

    TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file …

  • Medium 6.5
    CVE-2022-1988

    Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts

    Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.

    NeoRazorX neorazorx/facturascripts facturascripts/facturascripts Packagist
  • Low 2.5
    CVE-2022-1987

    Buffer Over-read in bfabiszewski/libmobi

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

    bfabiszewski bfabiszewski/libmobi libmobi libmobi Debian Ubuntu
  • Unscored —
    CVE-2022-32270

    In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Trav…

  • Unscored —
    CVE-2022-32271

    In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL…

  • Unscored —
    CVE-2022-32269

    In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displa…

  • Unscored —
    CVE-2022-32268

    StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST …

  • Unscored —
    CVE-2022-32265

    qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

  • Unscored —
    CVE-2022-29767

    adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a…