Skip to content
OpenAdvisories

Archive

6 July 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2022-31126 Public exploit Scanner template EPSS 53%

    Unauthenticated Remote Code Execution in Roxy-wi

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. Thi…

  • Critical 9.8
    CVE-2022-33980 Public exploit EPSS 45%

    Apache Commons Configuration insecure interpolation defaults

    Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.configura…

  • Critical 10.0
    CVE-2022-31125 Public exploit EPSS 20%

    Authentication Bypass in Roxy-wi

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTT…