Skip to content
OpenAdvisories

Archive

5 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /5 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.6
    GHSA-c58j-88f5-h53f

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares

    ### Impact pycares versions < 4.2.0 are affected by [CVE-2021-3672](https://nvd.nist.gov/vuln/detail/CVE-2021-3672). ### Patches Update to version 4.2.0.

    pycares PyPI
  • Medium 5.9
    CVE-2022-31117

    Double free of buffer during string decoding in ujson

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the …

    ultrajson ultrajson ujson ujson Debian Ubuntu Alpine PyPI
  • Medium 5.4
    CVE-2022-31014

    SMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud Server

    Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the backend SMTP server. However, the main risk here is that the atta…

    Nextcloud security-advisories
  • Medium 4.9
    CVE-2022-31770

    IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial…

    IBM App Connect Enterprise Certified Container
  • Medium 6.5
    CVE-2022-34879

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.

    Reflected Cross Site Scripting (XSS) vulnerabilities in AST Agent Time Sheet interface (/vicidial/AST_agent_time_sheet.php) of VICIdial via agent, and search_archived_data parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555.

    VICIdial VICIdial
  • Medium 5.5
    CVE-2022-34878 Public exploit

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.

    SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data …

    VICIdial VICIdial
  • Medium 6.4
    CVE-2022-34877 Public exploit

    VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.

    SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, dest…

    VICIdial VICIdial
  • Medium 5.5
    CVE-2022-34876 Public exploit

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.

    SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recordings, and agentcall_email parameters allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all da…

    VICIdial VICIdial
  • Medium 5.4
    CVE-2022-30289

    A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.…

    pycti PyPI
  • Medium 5.3
    CVE-2022-2309

    NULL Pointer Dereference in lxml/lxml

    NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through fo…

    lxml lxml/lxml libxml2 libxml2 Debian Ubuntu Azure Linux Alpine PyPI