Skip to content
OpenAdvisories

Archive

10 June 2022

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.1
    CVE-2022-25845 Public exploit EPSS 19%

    Deserialization of Untrusted Data

    The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote serve…

  • Unscored —
    CVE-2022-32981 Public exploit

    An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in p…

  • Unscored —
    CVE-2018-17240 Public exploit

    There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attack…

  • Unscored —
    CVE-2022-31402 Public exploit

    ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.

  • Unscored —
    CVE-2021-44117 Public exploit

    A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/s…

  • Unscored —
    CVE-2021-44582 Public exploit

    A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remo…

  • Unscored —
    CVE-2022-27502 Public exploit

    RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operat…