Skip to content
OpenAdvisories

Archive

25 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /25 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Medium 6.1
    CVE-2022-29931

    The administration interface of the Raytion Custom Security Manager (Raytion CSM) in Version 7.2.0 allows reflected Cro…

  • Unscored —
    RUSTSEC-2022-0056

    clipboard is Unmaintained

    Last release was almost 4 years ago and the repository with outstanding issues and pull requests seems to be abandoned by the maintainer. In addition the sole maintainer account may be abandoned that may represent account takeover risk. Current outstanding is…

    clipboard crates.io
  • Low 2.0
    CVE-2022-31017

    Expression Always True vulnerability in Zulip Server

    Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 are vulnerable to a logic error. A stream configured as private with protected history, where new subscribers should not be allowed to see messages sent before they were…

    zulip zulip
  • Medium 6.5
    CVE-2022-31016

    Argo CD vulnerable to Uncontrolled Memory Consumption

    Argo CD is a declarative continuous deployment for Kubernetes. Argo CD versions v0.7.0 and later are vulnerable to an uncontrolled memory consumption bug, allowing an authorized malicious user to crash the repo-server service, resulting in a Denial of Service…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • High —
    GHSA-3jhm-87m6-x959

    Path traversal mitigation bypass in OctoRPKI

    ### Impact The existing URI path filters in OctoRPKI (version < 1.4.3) mitigating Path traversal vulnerability could be bypassed by an attacker. In case a malicious TAL file is parsed, it was possible to write files outside the base cache folder. ### Specific…

    github.com/cloudflare/cfrpki Go
  • Critical 9.6
    CVE-2022-29168

    Cross Site Scripting in Wire Messages

    Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and exe…

    wireapp wire-webapp
  • High 7.5
    CVE-2022-24893

    Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

    ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Sta…

    espressif esp-idf
  • Medium 6.3
    CVE-2019-25071

    Apple iOS Siri Self privileges management

    A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remo…

    Apple iOS iOS
  • Unscored —
    CVE-2022-33128

    RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get…