Skip to content
OpenAdvisories

Archive

2 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /2 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-35924

    Verification requests (magic link) sent to unwanted emails

    NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in versions before `4.10.3` or `3.29.10` are affected. If an attacker could forge a request that sent a comma-se…

    nextauthjs next-auth next-auth npm
  • Critical 9.8
    CVE-2022-2631

    Improper Access Control in tooljet/tooljet

    Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0.

    ToolJet tooljet/tooljet
  • Critical 9.8
    CVE-2022-35223

    EasyUse MailHunter Ultimate - Deserialization of Untrusted Data

    EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker…

    EasyUse MailHunter Ultimate
  • Critical 9.8
    CVE-2020-28423

    Command Injection

    This affects all versions of package monorepo-build.

    monorepo-build npm
  • Critical 9.4
    CVE-2020-28434

    Command Injection

    This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.

    gitblame npm
  • Critical 9.4
    CVE-2020-28437

    Command Injection

    This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.

    heroku-env npm
  • Critical 9.8
    CVE-2020-28451

    Command Injection

    This affects the package image-tiler before 2.0.2.

    image-tiler npm
  • Critical 9.4
    CVE-2020-28453

    Command Injection

    This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.

    npos-tesseract npm