Skip to content
OpenAdvisories

Archive

22 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /22 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-34113

    Dataease before 1.11.2 allows arbitrary code execution via crafter plugin

    An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.

    io.dataease:dataease-plugin-common Maven
  • Critical 9.8
    CVE-2022-34115

    Dataease v1.11.1 SQL Injection via parameter dataSourceId

    DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.

    io.dataease:dataease-plugin-common Maven
  • Critical 9.9
    CVE-2022-25759 EPSS 12%

    Remote Code Injection

    The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.

    convert-svg-core npm
  • Critical 9.1
    CVE-2022-30998

    WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

    Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage Product Organizer for WooCommerce plugin <= 1.1 at WordPress.

    WooPlugins.co Homepage Product Organizer for WooCommerce (WordPress plugin) Web / CMS
  • Critical 9.8
    CVE-2022-2143 Public exploit EPSS 63%

    Advantech iView

    The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

    Advantech iView iView
  • Critical 9.8
    CVE-2022-34983

    The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.

    scu-captcha PyPI