Skip to content
OpenAdvisories

Archive

6 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /6 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.7
    CVE-2022-20808

    Cisco Smart Software Manager On-Prem Denial of Service Vulnerability

    A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incorrect handling of multiple simultaneous de…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • High 7.1
    CVE-2022-31127

    Improper handling of email input in next-auth

    NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.js.org/getting-started/rest-api#post-apiauthsigninprovider) that contains some m…

    nextauthjs next-auth next-auth npm
  • High 7.7
    CVE-2022-31124

    Possible leak of key's raw field if declared length is incorrect in openssh_key_parser

    openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key files. In versions prior to 0.0.6 if a field of a key is shorter than it is declared to be, the parser raises an error with a message cont…

    scottcwang openssh_key_parser openssh-key-parser PyPI
  • High 8.2
    CVE-2022-26348

    Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The W…

    Gallagher Command Centre
  • High 7.5
    CVE-2022-26078

    Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP a…

    Gallagher Gallagher Controller 6000
  • High 8.1
    CVE-2022-22681

    Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote …

    Synology Photo Station
  • High 7.5
    CVE-2022-31129

    Inefficient Regular Expression Complexity in moment

    moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 par…

    moment moment mediawiki wordpress Debian Ubuntu npm NuGet