Skip to content
OpenAdvisories

Archive

27 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /27 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2022-31101 Public exploit Scanner template EPSS 23%

    SQL Injection in prestashop/blockwishlist

    prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are …

    PrestaShop blockwishlist prestashop/blockwishlist Packagist
  • High 7.5
    CVE-2022-28171 Public exploit EPSS 52%

    The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to …

    Hikvision DS-A71024/48R-CVS,DS-A72024/48R-CVS DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D
  • Unscored —
    CVE-2022-1903 Public exploit Scanner template

    ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

    The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users b…

    Web / CMS