Skip to content
OpenAdvisories

Archive

25 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /25 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35131 Public exploit

    Joplin is vulnerable to arbitrary code execution

    Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

    joplin npm
  • Critical 9.8
    CVE-2022-24083

    Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.

    Pega Systems Pega Infinity
  • Critical 9.8
    CVE-2022-35649 Public exploit

    Moodle PostScript Code Injection

    The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2020-28447

    Command Injection

    This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)

    xopen npm
  • Critical 9.4
    CVE-2020-28435

    Command Injection

    This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.

    ffmpeg-sdk npm
  • Critical 9.8
    CVE-2020-28445

    Command Injection

    This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.

  • Critical 9.8
    CVE-2020-28438

    Command Injection

    This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js

    deferred-exec npm
  • Critical 9.8
    CVE-2020-28446

    Command Injection

    The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.

    ntesseract npm
  • Critical 9.8
    CVE-2020-28443

    Command Injection

    This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.

    sonar-wrapper npm
  • Critical 9.3
    CVE-2022-33965 Scanner template

    WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

    Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress.

    osamaesh WP Visitor Statistics (WordPress plugin) Web / CMS