Skip to content
OpenAdvisories

Archive

9 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /9 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2022-29226

    Trivial authentication bypass in Envoy

    Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access tokens, so by design when the HMAC signed cookie is missing a full authentication flow should be tri…

    envoyproxy envoy
  • Critical 9.1
    CVE-2022-31830 EPSS 16%

    Server-Side Request Forgery in kityminder

    Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.

    kityminder npm
  • Critical 9.8
    CVE-2022-2037

    Excessive Attack Surface in tooljet/tooljet

    Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.

    ToolJet tooljet/tooljet
  • Critical 9.0
    CVE-2022-2036

    Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis

    Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.

    francoisjacquet francoisjacquet/rosariosis francoisjacquet/rosariosis Packagist
  • Critical 10.0
    CVE-2022-1986

    OS Command Injection in gogs/gogs

    OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.

    Gogs gogs/gogs gogs.io/gogs Go