Skip to content
OpenAdvisories

Archive

30 June 2022

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Critical 9.8

    OS Command Injection in awesome spawn

    Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command.

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3…

  • Critical 9.1

    Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3…

  • Critical 9.1

    A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted n…

  • Critical 9.8

    Exemys RME1

    By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication scheme and perform administrative operations.

  • Critical 9.8

    Prototype Pollution in deep.assign

    deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').