Skip to content
OpenAdvisories

Archive

28 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /28 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-32532 Public exploit EPSS 26%

    Authentication Bypass Vulnerability

    Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

    Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven
  • Unscored —
    CVE-2022-31886 Public exploit

    Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sendin…

  • Unscored —
    CVE-2022-31885 Public exploit EPSS 33%

    Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.

  • Critical 9.8
    CVE-2022-31061 Public exploit EPSS 51%

    SQL injection on login page in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are r…

    GLPI glpi glpi Ubuntu
  • Critical 9.8
    CVE-2022-31056 Public exploit

    SQL injection with _actor parameter in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue…

    GLPI glpi glpi Ubuntu