Skip to content
OpenAdvisories

Archive

13 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /13 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • High 7.3
    CVE-2017-20126

    KB Affiliate Referral Script index.php sql injection

    A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is pos…

  • Medium 5.4
    CVE-2022-34358

    IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

    IBM i
  • Unscored —
    DRUPAL-CONTRIB-2022-048

    This module enables you to generate print versions of content. Some installations of the module make use of the dompdf/…

    drupal/entity_print Packagist
  • Unscored —
    CVE-2022-32096

    Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vuln…

    rhonabwy rhonabwy Debian Ubuntu
  • Unscored —
    CVE-2022-32074 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-…

  • Unscored —
    CVE-2022-32073 Public exploit

    WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR.

  • Medium 5.4
    CVE-2022-32065

    RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

    An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

    com.ruoyi:ruoyi Maven
  • Unscored —
    CVE-2022-32274

    The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation fu…

  • Medium 6.5
    CVE-2019-10800

    Command Injection

    This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.

    codecov PyPI
  • High 8.3
    CVE-2019-10761

    Sandbox Bypass

    This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainM…

    vm2 npm
  • High 7.5
    CVE-2022-31781

    Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)

    Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this…

    Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-core Maven
  • Unscored —
    CVE-2021-46827

    An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XS…

  • Unscored —
    CVE-2022-28888

    Spryker Commerce OS 1.4.2 allows Remote Command Execution.

  • Medium 4.6
    CVE-2022-32114 Public exploit

    Strapi 4.1.12 Cross-site Scripting via crafted file

    An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create (upload)" permission …

    @strapi/strapi npm