Skip to content
OpenAdvisories

Archive

25 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /25 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35131 Public exploit

    Joplin is vulnerable to arbitrary code execution

    Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

    joplin npm
  • Unscored —
    CVE-2022-24992 Public exploit

    A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversa…

    qr-code-generator Azure Linux
  • Unscored —
    CVE-2022-34962 Public exploit

    OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) v…

  • High 7.5
    CVE-2022-35650 Public exploit EPSS 54%

    Moodle Arbitrary file read when importing lesson questions

    The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks.…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-35649 Public exploit

    Moodle PostScript Code Injection

    The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Unscored —
    CVE-2022-34961 Public exploit

    OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) v…

  • Unscored —
    CVE-2022-34963 Public exploit

    OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) v…

  • Unscored —
    CVE-2022-36446 Public exploit Scanner template EPSS 96%

    software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.