Skip to content
OpenAdvisories

Archive

13 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /13 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-31053

    Signature forgery in Biscuit

    Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to creat…

    biscuit-auth biscuit biscuit-haskell biscuit-auth Maven Go crates.io Hackage
  • Critical 9.8
    CVE-2022-33174 Public exploit Scanner template EPSS 14%

    Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypa…

  • Critical 9.8
    CVE-2022-33175

    Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions set…

  • Critical 9.8
    CVE-2022-30311

    FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

    In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access …

    Festo Controller CECC-X-M1-MV-S1 (8124924) Controller CECC-X-M1-YS-L2 (8082794) Controller CECC-X-M1 (4407603)
  • Critical 9.8
    CVE-2022-30310

    FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

    In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access …

    Festo Servo Press Kit YJKP (8077950) Controller CECC-X-M1-MV (4407605) Controller CECC-X-M1-MV-S1 (4407606)
  • Critical 9.8
    CVE-2022-30309

    FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

    In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper …

    Festo Controller CECC-X-M1 (8124922) Servo Press Kit YJKP- (8058596) Controller CECC-X-M1-MV (8124923)
  • Critical 9.8
    CVE-2022-30308

    FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

    In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper a…

    Festo Controller CECC-X-M1-YS-L1 (8082793) Controller CECC-X-M1-Y-YJKP (4803891) Controller CECC-X-M1 (8124922)
  • Critical 9.8
    CVE-2022-1768 Scanner template EPSS 13%

    RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection

    The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possible for unauthentica…

    David F. Carr RSVPMaker Web / CMS
  • Critical 9.1
    CVE-2022-2064

    Insufficient Session Expiration in nocodb/nocodb

    Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.

    nocodb nocodb/nocodb nocodb npm
  • Critical 9.0
    CVE-2022-2063

    Improper Privilege Management in nocodb/nocodb

    Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.

    nocodb nocodb/nocodb nocodb npm
  • Critical 9.8
    CVE-2021-37404

    Heap buffer overflow in libhdfs native library

    There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 o…

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-common Maven
  • Critical 9.1
    CVE-2022-2062

    Generation of Error Message Containing Sensitive Information in nocodb/nocodb

    Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+.

    nocodb nocodb/nocodb nocodb npm