Skip to content
OpenAdvisories

Archive

6 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /6 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-20813

    Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

    Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks …

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Critical 9.0
    CVE-2022-20812

    Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

    Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks …

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Critical 10.0
    CVE-2022-31126 Public exploit Scanner template EPSS 53%

    Unauthenticated Remote Code Execution in Roxy-wi

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. Thi…

    hap-wi roxy-wi
  • Critical 9.8
    CVE-2022-32533

    Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues

    Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a do…

    Apache Software Foundation Apache Portals org.apache.portals.jetspeed-2:jetspeed-commons Maven
  • Critical 9.8
    CVE-2022-33980 Public exploit EPSS 45%

    Apache Commons Configuration insecure interpolation defaults

    Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.configura…

    Apache Software Foundation Apache Commons Configuration org.apache.commons:commons-configuration2 commons-configuration2 Debian Ubuntu Maven
  • Critical 10.0
    CVE-2022-31125 Public exploit EPSS 20%

    Authentication Bypass in Roxy-wi

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTT…

    hap-wi roxy-wi