Skip to content
OpenAdvisories

Archive

15 June 2022

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-30136 Public exploit EPSS 73%

    Windows Network File System Remote Code Execution Vulnerability

    Windows Network File System Remote Code Execution Vulnerability

  • High 8.8
    CVE-2022-33140 Public exploit

    Improper Neutralization of Command Elements in Shell User Group Provider

    The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUs…

  • Unscored —
    CVE-2022-20142 Public exploit

    In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parc…

  • Unscored —
    CVE-2022-20140 Public exploit

    In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l…

  • Unscored —
    CVE-2022-20138 Public exploit

    In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app …

  • Unscored —
    CVE-2022-20130 Public exploit

    In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow…

  • Unscored —
    CVE-2022-20126 Public exploit

    In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interact…

  • Unscored —
    CVE-2022-20186 Public exploit

    In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input valida…