Skip to content
OpenAdvisories

Archive

22 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /22 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-33127

    Improper handling of double quotes in file name in Diffy in Windows environment

    The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string.

    diffy ruby-diffy Ubuntu RubyGems
  • Critical 9.0
    CVE-2022-22980 Public exploit EPSS 18%

    SpEL Injection in Spring Data MongoDB

    A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

    org.springframework.data:spring-data-mongodb Maven