Skip to content
OpenAdvisories

Archive

29 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /29 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Medium 4.3
    CVE-2017-20110

    Teleopti WFM Administration Credentials information disclosure

    A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure (Credentia…

    Teleopti WFM
  • Medium 4.3
    CVE-2017-20109

    Teleopti WFM Administration GetOneTenant Credentials information disclosure

    A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to informa…

    Teleopti WFM
  • Low 3.5
    CVE-2017-20108

    Easy Table Plugin options-general.php cross site scripting

    A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "><script>alert(1)</script> leads to basic cross site scriptin…

  • Unscored —
    CVE-2022-29272 Scanner template

    In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing.

  • Unscored —
    CVE-2022-29271

    In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime…

  • Unscored —
    CVE-2022-29270

    In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address.

  • Unscored —
    CVE-2022-29269

    In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that…

  • Medium 5.4
    CVE-2022-28803

    Stored XSS in link tags added via XHR in SilverStripe Framework

    In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).

    silverstripe/framework Packagist
  • Unscored —
    CVE-2022-31266

    In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attacker…

  • Unscored —
    CVE-2022-31897 Public exploit

    SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?m…

  • High 8.3
    CVE-2022-33639

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers