Skip to content
OpenAdvisories

Archive

6 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /6 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2022-29296 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attac…

  • Unscored —
    CVE-2022-27438 Public exploit

    Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advance…

  • Unscored —
    CVE-2022-1598 Public exploit Scanner template

    WPQA < 5.5 - Unauthenticated Private Message Disclosure

    The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.

    Web / CMS
  • Unscored —
    CVE-2022-1597 Public exploit Scanner template

    WPQA < 5.4 - Reflected Cross-Site Scripting

    The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks

    Web / CMS
  • Unscored —
    CVE-2022-1421 Public exploit

    Discy < 5.2 - Settings Update via CSRF

    The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack

    Web / CMS