Skip to content
OpenAdvisories

Archive

23 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /23 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-2147

    Unquoted Service Path in Cloudflare WARP for Windows

    Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.

    Cloudflare WARP
  • Medium 6.3
    CVE-2022-26864

    Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potent…

    Dell CPG BIOS
  • Medium 6.3
    CVE-2022-26863

    Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potent…

    Dell CPG BIOS
  • Medium 6.3
    CVE-2022-26862

    Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potent…

    Dell CPG BIOS
  • Medium 5.4
    CVE-2022-33113

    Cross-site Scripting in Jfinal CMS

    Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module.

    com.jfinal:jfinal Maven
  • Medium 6.1
    CVE-2022-34305 Scanner template

    XSS in examples web application

    In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  • Medium 5.7
    CVE-2022-31009

    DoS vulnerability: Invalid Accent Colors

    wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be use…

    wireapp wire-ios iOS
  • Medium 4.3
    CVE-2017-20091

    File Manager Plugin cross-site request forgery

    A vulnerability was found in File Manager Plugin 3.0.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely.

  • Medium 4.3
    CVE-2017-20090

    Global Content Blocks Plugin cross-site request forgery

    A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely.

  • Medium 4.3
    CVE-2017-20088

    Atahualpa Theme cross-site request forgery

    A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely.

  • Medium 6.3
    CVE-2017-20086

    VaultPress Plugin code injection

    A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.