Skip to content
OpenAdvisories

Archive

8 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /8 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2022-1993 EPSS 37%

    Path Traversal in gogs/gogs

    Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

    Gogs gogs/gogs gogs.io/gogs Go
  • High 8.2
    CVE-2022-2026

    Cross-site Scripting (XSS) - Stored in kromitgmbh/titra

    Cross-site Scripting (XSS) - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0.

    kromitgmbh kromitgmbh/titra
  • High 8.0
    CVE-2022-2027

    Improper Neutralization of Formula Elements in a CSV File in kromitgmbh/titra

    Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.

    kromitgmbh kromitgmbh/titra
  • High 8.2
    CVE-2022-2028

    Cross-site Scripting (XSS) - Generic in kromitgmbh/titra

    Cross-site Scripting (XSS) - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0.

    kromitgmbh kromitgmbh/titra
  • High 8.2
    CVE-2022-2029

    Cross-site Scripting (XSS) - DOM in kromitgmbh/titra

    Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.

    kromitgmbh kromitgmbh/titra
  • High 7.5
    CVE-2022-25151

    ITarian - Session cookie not protected by HttpOnly flag

    Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker could exploit this vulnerability to gain access to the managem…

    ITarian ITarian SaaS platform / on-premise
  • High 7.8
    CVE-2022-25153

    ITarian - Local privilege escalation in Endpoint Manager agent on Windows

    The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an in…

    ITarian Endpoint Manager Communication Client for Windows Windows