Skip to content
OpenAdvisories

Archive

7 July 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2022-33098 Public exploit EPSS 54%

    Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function…

  • Unscored —
    CVE-2022-31854 Public exploit Scanner template EPSS 32%

    Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin…

  • Medium 4.8
    CVE-2022-32060 Public exploit

    Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

    An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.