Skip to content
OpenAdvisories

Archive

27 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /27 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.3
    CVE-2022-33879

    Incomplete fix and new regex DoS in StandardsExtractingContentHandler

    The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 …

    Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven
  • Low 3.5
    CVE-2017-20098

    Admin Custom Login Plugin Persistent cross site scripting

    A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely.

  • Low 3.8
    CVE-2022-2106

    Elcomplus SmartICS Path Traversal

    Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

    Elcomplus SmartICS
  • Low 3.5
    CVE-2017-20101

    ProjectSend information disclosure

    A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate…

  • Low 3.5
    CVE-2017-20100

    Air Transfer cross site scripting

    A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been dis…

  • Low 3.5
    CVE-2022-2213

    SourceCodester Library Management System cross site scripting

    A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_admin_details.php?id=admin. The manipulation of the argument Nam…

    SourceCodester Library Management System