Skip to content
OpenAdvisories

Archive

11 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /11 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Unscored —
    CVE-2021-44266

    GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

  • Unscored —
    CVE-2022-30780 Public exploit EPSS 57%

    Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connec…

    lighttpd lighttpd Debian Ubuntu
  • Medium 5.4
    CVE-2021-41502

    Cross site scripting in intelliants/subrion

    An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.

    intelliants/subrion Packagist
  • Unscored —
    CVE-2021-41738

    ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticat…

  • Medium 5.9
    CVE-2017-20040

    SICUNET Access Controller Password Storage cleartext storage

    A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement.

    SICUNET Access Controller
  • Critical 9.8
    CVE-2017-20039

    SICUNET Access Controller hard-coded password

    A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely.

    SICUNET Access Controller
  • Medium 6.3
    CVE-2017-20038

    SICUNET Access Controller card_scan_decoder.php privileges management

    A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The att…

    SICUNET Access Controller
  • Medium 6.3
    CVE-2017-20037

    SICUNET Access Controller privileges management

    A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely.

    SICUNET Access Controller