Skip to content
OpenAdvisories

Archive

7 July 2022

Vulnerabilities first published on this day (UTC), newest first.

48 results · Feed

  • Critical 9.1

    Server-Side Request Forgery (SSRF) in nocodb/nocodb

    With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.

  • Unscored —

    Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function ob…

  • Medium 4.8
    CVE-2022-32060 Public exploit

    Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

    An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.

  • Unscored —
    CVE-2022-32449 EPSS 19%

    TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter i…

  • Medium 5.9

    When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw make…

  • Medium 4.3
    CVE-2022-32205 EPSS 31%

    A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 st…

  • Critical 9.8
    CVE-2022-32207 EPSS 12%

    When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…

  • Medium 6.5
    CVE-2022-32206 EPSS 36%

    curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple …