Skip to content
OpenAdvisories

Archive

June 2022

Vulnerabilities first published in this month (UTC), newest first.

← May 2022 2022 / June July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-26135 Public exploit EPSS 72%

    A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user …

    Atlassian Jira Service Management Data Center Jira Service Management Server Jira Software Data Center Web / CMS
  • Medium 6.5
    CVE-2022-20828 Public exploit EPSS 49%

    Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

    A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER mo…

    Cisco Cisco FirePOWER Services Software for ASA Network devices
  • Medium 5.3
    CVE-2022-34298 Public exploit

    NT auth module vulnerability in OpenAM

    The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

    org.openidentityplatform.openam:openam-core Maven
  • Medium 5.3
    CVE-2022-31062 Public exploit

    Unauthenticated Local File Inclusion

    ### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file can be deleted if deploy feature is not used.

    glpi-project glpi-inventory-plugin
  • Medium 4.7
    CVE-2022-29455 Public exploit EPSS 24%

    WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

    DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

    Elementor Elementor Website Builder (WordPress plugin) Web / CMS
  • Medium 6.3
    CVE-2019-25066 Public exploit

    ajenti API privileges management

    A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to t…

  • Medium 6.3
    CVE-2019-25065 Public exploit

    OpenNetAdmin os command injection

    A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the p…