Skip to content
OpenAdvisories

Archive

4 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /4 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-33171 Public exploit EPSS 21%

    SQL injection in typeORM

    The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection…

    typeorm npm
  • Critical 9.8
    CVE-2022-34265 Public exploit EPSS 74%

    Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection

    An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind cho…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI