Skip to content
OpenAdvisories

Archive

15 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /15 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.2
    CVE-2022-25869 Public exploit

    Angular (deprecated package) Cross-site Scripting

    All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <t…

    angular.js angular.js angular Debian Ubuntu npm
  • High 7.9
    CVE-2022-31159 Public exploit

    Partial Path Traversal in com.amazonaws:aws-java-sdk-s3

    The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applicatio…

    AWS aws-sdk-java com.amazonaws:aws-java-sdk-s3 Maven
  • Unscored —
    CVE-2022-32118 Public exploit

    Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory …

  • Unscored —
    CVE-2022-32119 Public exploit

    Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo fun…

  • Critical 10.0
    CVE-2022-31161 Public exploit Scanner template EPSS 29%

    Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

    Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py fil…

    hap-wi roxy-wi