Skip to content
OpenAdvisories

Archive

1 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /1 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • Unscored —
    CVE-2022-32551

    Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xm…

  • Unscored —
    CVE-2022-32412

    An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.

  • Unscored —
    CVE-2022-32411

    An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.

  • Unscored —
    CVE-2022-32324

    PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.

  • Unscored —
    CVE-2022-34903

    GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyri…

    gnupg2 gnupg2 gnupg gnupg2 Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-32095

    Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at ord…

  • Unscored —
    CVE-2022-32094 Scanner template

    Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at do…

  • Unscored —
    CVE-2022-32093

    Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at ad…

  • Unscored —
    CVE-2022-32420 EPSS 20%

    College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin…

  • Unscored —
    CVE-2022-32384

    Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWi…

  • Critical 9.8
    CVE-2022-31943

    Unrestricted Upload of File with Dangerous Type in MCMS

    MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

    net.mingsoft:ms-mcms Maven
  • Medium 4.8
    CVE-2022-25896

    Session Fixation

    This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

    passport passportjs passportjs Debian Ubuntu npm
  • High 8.1
    CVE-2022-25900

    Command Injection

    All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.

    git-clone npm
  • High 7.7
    CVE-2022-25898

    Improper Verification of Cryptographic Signature

    The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Val…

    jsrsasign npm
  • Medium 5.3
    CVE-2022-25758

    Regular Expression Denial of Service (ReDoS)

    All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.

    node-node-sass scss-tokenizer Ubuntu npm
  • Medium 6.2
    CVE-2022-25876

    Server-side Request Forgery (SSRF)

    The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection.

    link-preview-js npm
  • Unscored —
    CVE-2022-32088

    MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Fi…

    mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu
  • Unscored —
    CVE-2022-32087

    MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.

    mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu
  • Unscored —
    CVE-2022-32086

    MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.

    mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu
  • Unscored —
    CVE-2022-32085

    MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cle…

    mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu
  • Unscored —
    CVE-2022-32083

    MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cac…

    mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu
  • Medium 4.6
    CVE-2022-22373

    An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead …

    IBM InfoSphere Information Server
  • Medium 4.0
    CVE-2022-22367

    IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a …

    IBM UrbanCode Deploy
  • Medium 4.9
    CVE-2022-22366

    IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which c…

    IBM UrbanCode Deploy
  • Unscored —
    CVE-2022-32030

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.

  • Unscored —
    CVE-2022-32031

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteSta…

  • Unscored —
    CVE-2022-32032 EPSS 10%

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMa…

  • Unscored —
    CVE-2022-32033

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer.

  • Unscored —
    CVE-2022-32034

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteracli…

  • Unscored —
    CVE-2022-32035 EPSS 15%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.

  • Unscored —
    CVE-2022-32036

    Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and t…

  • Unscored —
    CVE-2022-32037

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.

  • Unscored —
    CVE-2022-32039

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClien…

  • Unscored —
    CVE-2022-32040

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.

  • Unscored —
    CVE-2022-32041

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.

  • Unscored —
    CVE-2022-32043

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.

  • Unscored —
    CVE-2022-32044

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the functi…

  • Unscored —
    CVE-2022-32045

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function F…

  • Unscored —
    CVE-2022-32047

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function F…

  • Unscored —
    CVE-2022-32046

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function F…