Skip to content
OpenAdvisories

Archive

18 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /18 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2022-28672 Public exploit

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

    Foxit PDF Reader
  • High 8.8
    CVE-2022-33891 Exploited Public exploit Scanner template EPSS 93%

    Apache Spark shell command injection vulnerability via Spark UI

    The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in H…

    Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.12 Maven PyPI
    KEV Mar 7, 2023
  • High 7.2
    CVE-2022-1565 Public exploit EPSS 15%

    Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload

    The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with administrator level pe…

    WP All Import WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets