Skip to content
OpenAdvisories

Archive

8 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /8 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    GHSA-rwf4-gx62-rqfw

    `MsQueue` `push`/`pop` use the wrong orderings

    Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: <https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919>.

    crossbeam crates.io
  • Medium 5.4
    CVE-2022-31038

    XSS vulnerability in repository issue list in Gogs

    Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 `DisplayName` does not filter characters input from users, which leads to an XSS vulnerability when directly displayed in the issue list. This issue has been resolved in commi…

    Gogs Gogs gogs.io/gogs Go
  • Medium 6.1
    CVE-2022-30875

    Cross-site Scripting in Dolibarr

    Dolibarr 12.0.5 is vulnerable to Cross Site Scripting (XSS) via Sql Error Page.

    dolibarr/dolibarr Packagist
  • Medium 6.1
    CVE-2022-2015

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

    jgraph jgraph/drawio