Archive

27 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /27 August 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.4

CVE-2022-34140 Public exploit

Feehi CMS Cross-site Scripting

A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.

feehi/cms Packagist

Jul 27, 2022
Medium 6.5

CVE-2022-36883 Public exploit Scanner template

Lack of authentication mechanism in Jenkins Git Plugin webhook

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.

Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven

Jul 27, 2022
High 7.5

CVE-2022-36946 Public exploit

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jul 27, 2022