Skip to content
OpenAdvisories

Archive

June 2022

Vulnerabilities first published in this month (UTC), newest first.

← May 2022 2022 / June July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-32532 Public exploit EPSS 26%

    Authentication Bypass Vulnerability

    Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

    Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven
  • Critical 9.8
    CVE-2022-31061 Public exploit EPSS 51%

    SQL injection on login page in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are r…

    GLPI glpi glpi Ubuntu
  • Critical 9.8
    CVE-2022-31056 Public exploit

    SQL injection with _actor parameter in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue…

    GLPI glpi glpi Ubuntu
  • Critical 9.1
    CVE-2022-20829 Public exploit

    Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

    A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upl…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Critical 9.0
    CVE-2022-22980 Public exploit EPSS 18%

    SpEL Injection in Spring Data MongoDB

    A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

    org.springframework.data:spring-data-mongodb Maven
  • Critical 9.8
    CVE-2022-30136 Public exploit EPSS 73%

    Windows Network File System Remote Code Execution Vulnerability

    Windows Network File System Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  • Critical 9.8
    CVE-2022-33174 Public exploit Scanner template EPSS 14%

    Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypa…

  • Critical 9.8
    CVE-2022-26134 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…

    Atlassian Confluence Server Confluence Data Center Web / CMS
    KEV Jun 2, 2022