Skip to content
OpenAdvisories

Archive

July 2022

Vulnerabilities first published in this month (UTC), newest first.

← June 2022 2022 / July August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

1,993 results · Feed

  • Medium 5.5
    CVE-2022-1794

    Plaintext Storage of a password in CODESYS V3 OPC DA Server

    The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system.

    CODESYS CODESYS OPC DA Server ICS / OT
  • Medium 6.5
    CVE-2022-2368

    Authentication Bypass by Spoofing in microweber/microweber

    Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.

    microweber microweber/microweber microweber/microweber Packagist
  • Unscored —
    CVE-2022-35416 Public exploit Scanner template

    H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.

  • Unscored —
    CVE-2022-35414

    softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_…

    qemu qemu Debian Azure Linux
  • Unscored —
    CVE-2022-31588

    The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_…

  • Unscored —
    CVE-2022-31587

    The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the F…

  • Unscored —
    CVE-2022-31586

    The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because …

  • Unscored —
    CVE-2022-31585

    The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Fl…

  • Unscored —
    CVE-2022-31584

    The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_fi…

  • Unscored —
    CVE-2022-31583

    The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because …

  • Unscored —
    CVE-2022-31582

    The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_f…

  • Unscored —
    CVE-2022-31581

    The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file f…

  • Unscored —
    CVE-2022-31580

    The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Fla…

  • Unscored —
    CVE-2022-31579

    The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_fi…

  • Unscored —
    CVE-2022-31578

    The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_f…

  • Unscored —
    CVE-2022-31577

    The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the …

  • Unscored —
    CVE-2022-31576

    The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Fla…

  • Unscored —
    CVE-2022-31575

    The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask se…

  • Unscored —
    CVE-2022-31574

    The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask…

  • Critical 9.3
    CVE-2022-31573

    ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

    The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

    chainerrl-visualizer PyPI
  • Unscored —
    CVE-2022-31572

    The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_fi…

  • Unscored —
    CVE-2022-31571

    The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because…

    python-flask Azure Linux
  • Unscored —
    CVE-2022-31570

    The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because t…

  • Unscored —
    CVE-2022-31568

    The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file …

  • Unscored —
    CVE-2022-31567

    The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file funct…

  • Unscored —
    CVE-2022-31566

    The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file …

  • Unscored —
    CVE-2022-31565

    The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file …

  • Unscored —
    CVE-2022-31564

    The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_f…

  • Unscored —
    CVE-2022-31563

    The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file fu…

  • Unscored —
    CVE-2022-31562

    The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask s…

  • Unscored —
    CVE-2022-31561

    The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the…

  • Unscored —
    CVE-2022-31560

    The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_f…

  • Unscored —
    CVE-2022-31559

    The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_f…

  • Critical 9.3
    CVE-2022-31558

    Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

    The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

    shiva PyPI
  • Unscored —
    CVE-2022-31557

    The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file fun…

  • Unscored —
    CVE-2022-31556

    The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flas…

  • Unscored —
    CVE-2022-31555

    The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask sen…

  • Unscored —
    CVE-2022-31554

    The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal b…

  • Unscored —
    CVE-2022-31553

    The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask s…

  • Unscored —
    CVE-2022-31552

    The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the F…