Skip to content
OpenAdvisories

Archive

12 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /12 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2022-2013

    In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental …

    Octopus Deploy Octopus Server
  • High 8.4
    CVE-2022-2054

    Code Injection in nuitka/nuitka

    Code Injection in GitHub repository nuitka/nuitka prior to 0.9.

    nuitka nuitka/nuitka nuitka nuitka Debian Ubuntu PyPI
  • High 8.4
    CVE-2021-41641

    Link Following in Deno

    Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

    deno crates.io
  • Medium 6.1
    CVE-2021-41750

    Cross-site Scripting in SEOmatic plugin

    A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of …

    nystudio107/craft-seomatic Packagist
  • Critical 9.8
    CVE-2021-41749 Scanner template EPSS 17%

    Code Injection in SEOmatic

    In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.

    nystudio107/craft-seomatic Packagist
  • Low 3.5
    CVE-2018-25039

    Thomson TCW710 RgUrlBlock.asp Persistent cross site scriting

    A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input ><script>alert(1)<…

    Thomson TCW710
  • Low 3.5
    CVE-2018-25038

    Thomson TCW710 RgDhcp Persistent cross site scriting

    A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input ><script>alert(1)</script> as part of POST Requ…

    Thomson TCW710
  • Low 3.5
    CVE-2018-25037

    Thomson TCW710 RgDdns Persistent cross site scriting

    A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input ><script>alert(1)</script> as p…

    Thomson TCW710
  • Low 3.5
    CVE-2018-25036

    Thomson TCW710 RgTime Persistent cross site scriting

    A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the inp…

    Thomson TCW710
  • Low 3.5
    CVE-2018-25035

    Thomson TCW710 RGFirewallEL Persistent cross site scriting

    A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</scri…

    Thomson TCW710
  • Low 3.5
    CVE-2018-25034

    Thomson TCW710 wlanPrimaryNetwork Persistent cross site scripting

    A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script…

    Thomson TCW710