# CVEs published 2022-06-01

113 CVEs were published on June 1, 2022: 1 critical, 20 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-29235](https://cve.now/CVE-2022-29235.md): Limited data exposure for shared external videos in BigBlueButton (CVSS 5.3, bigbluebutton)
- [CVE-2022-29236](https://cve.now/CVE-2022-29236.md): Improper access control for pencil annotations in BigBlueButton (CVSS 4.3, bigbluebutton)
- [CVE-2022-29234](https://cve.now/CVE-2022-29234.md): Grace period for lock settings in public/private chats in BigBlueButton (CVSS 4.3, bigbluebutton)
- [CVE-2022-29233](https://cve.now/CVE-2022-29233.md): Improper access control for breakout rooms in BigBlue Button (CVSS 4.3, bigbluebutton)
- [CVE-2022-29232](https://cve.now/CVE-2022-29232.md): Exposure of messages in BigBlueButton public chats (CVSS 6.5, bigbluebutton)
- [CVE-2022-29169](https://cve.now/CVE-2022-29169.md): ReDoS on endpoint html5client/useragent in BigBlueButton (CVSS 7.5, bigbluebutton)
- [CVE-2022-30190](https://cve.now/CVE-2022-30190.md): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2022-30128](https://cve.now/CVE-2022-30128.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Edge)
- [CVE-2022-30127](https://cve.now/CVE-2022-30127.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Edge)
- [CVE-2022-26905](https://cve.now/CVE-2022-26905.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2022-31022](https://cve.now/CVE-2022-31022.md): Missing Role Based Access Control for the REST handlers in bleve/http package (CVSS 6.2, blevesearch bleve · github.com/blevesearch/bleve +1)
- [CVE-2022-27778](https://cve.now/CVE-2022-27778.md): A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when \`--no-clobber\` is used together with \`--re (no CVSS, https://github.com/curl/curl)
- [CVE-2022-31973](https://cve.now/CVE-2022-31973.md): Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete\_img. (no CVSS)
- [CVE-2022-31974](https://cve.now/CVE-2022-31974.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=. (no CVSS)
- [CVE-2022-31975](https://cve.now/CVE-2022-31975.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manage\_user&id=. (no CVSS)
- [CVE-2022-31976](https://cve.now/CVE-2022-31976.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete\_request. (no CVSS)
- [CVE-2022-31977](https://cve.now/CVE-2022-31977.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete\_team. (no CVSS)
- [CVE-2022-31978](https://cve.now/CVE-2022-31978.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete\_inquiry. (no CVSS)
- [CVE-2022-31980](https://cve.now/CVE-2022-31980.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage\_team&id=. (no CVSS)
- [CVE-2022-31981](https://cve.now/CVE-2022-31981.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/view\_team&id=. (no CVSS)
- [CVE-2022-31982](https://cve.now/CVE-2022-31982.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/view\_request&id=. (no CVSS)
- [CVE-2022-31983](https://cve.now/CVE-2022-31983.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/manage\_request&id=. (no CVSS)
- [CVE-2022-31984](https://cve.now/CVE-2022-31984.md): Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take\_action.php?id=. (no CVSS)
- [CVE-2022-31966](https://cve.now/CVE-2022-31966.md): ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple\_chat\_bot/classes/Master.php?f=delete\_img. (no CVSS)
- [CVE-2022-31969](https://cve.now/CVE-2022-31969.md): ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simple\_chat\_bot/admin/?page=user/manage\_user&id=. (no CVSS)
- [CVE-2022-31970](https://cve.now/CVE-2022-31970.md): ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simple\_chat\_bot/admin/?page=responses/manage\_response&id=. (no CVSS)
- [CVE-2022-31971](https://cve.now/CVE-2022-31971.md): ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simple\_chat\_bot/admin/?page=responses/view\_response&id=. (no CVSS)
- [CVE-2022-31000](https://cve.now/CVE-2022-31000.md): CSRF allows attacker to finalize/unfinalize order adjustments in solidus\_backend (CVSS 2.3, solidusio solidus · solidus\_backend)
- [CVE-2022-24848](https://cve.now/CVE-2022-24848.md): SQL Injection in DHIS2's in OrgUnit program association (CVSS 8.8, dhis2-core)
- [CVE-2022-29659](https://cve.now/CVE-2022-29659.md): Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php. (no CVSS)
- [CVE-2022-1929](https://cve.now/CVE-2022-1929.md): Exponential ReDoS in devcert (CVSS 5.9, devcert)
- [CVE-2021-43308](https://cve.now/CVE-2021-43308.md): Exponential ReDoS in markdown-link-extractor (CVSS 5.9, markdown-link-extractor)
- [CVE-2021-43307](https://cve.now/CVE-2021-43307.md): Exponential ReDoS in semver-regex (CVSS 5.9, semver-regex)
- [CVE-2021-43306](https://cve.now/CVE-2021-43306.md): Exponential ReDoS in jquery-validation (CVSS 5.9, jquery-validation)
- [CVE-2022-30277](https://cve.now/CVE-2022-30277.md): BD Synapsys™ – Insufficient Session Expiration (CVSS 5.7, Becton Dickinson (BD) BD Synapsys™)
- [CVE-2022-22767](https://cve.now/CVE-2022-22767.md): BD Pyxis™ Products – Default Credentials (CVSS 8.8, Becton Dickinson (BD) BD Pyxis™ Anesthesia ES Station ·… +10)
- [CVE-2022-31945](https://cve.now/CVE-2022-31945.md): Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=delete\_img. (no CVSS)
- [CVE-2022-31946](https://cve.now/CVE-2022-31946.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete\_team. (no CVSS)
- [CVE-2022-31948](https://cve.now/CVE-2022-31948.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete\_report. (no CVSS)
- [CVE-2022-31951](https://cve.now/CVE-2022-31951.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete\_respondent\_type. (no CVSS)
- [CVE-2022-31952](https://cve.now/CVE-2022-31952.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete\_incident. (no CVSS)
- [CVE-2022-31953](https://cve.now/CVE-2022-31953.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident\_reports/view\_report.php?id=. (no CVSS)
- [CVE-2022-31956](https://cve.now/CVE-2022-31956.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident\_reports/manage\_report.php?id=. (no CVSS)
- [CVE-2022-31957](https://cve.now/CVE-2022-31957.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view\_team.php?id=. (no CVSS)
- [CVE-2022-31959](https://cve.now/CVE-2022-31959.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage\_team.php?id=. (no CVSS)
- [CVE-2022-31961](https://cve.now/CVE-2022-31961.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage\_incident.php?id=. (no CVSS)
- [CVE-2022-31962](https://cve.now/CVE-2022-31962.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view\_incident.php?id=. (no CVSS)
- [CVE-2022-31964](https://cve.now/CVE-2022-31964.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent\_types/view\_respondent\_type.php?id=. (no CVSS)
- [CVE-2022-31965](https://cve.now/CVE-2022-31965.md): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent\_types/manage\_respondent\_type.php?id=. (no CVSS)
- [CVE-2021-27914](https://cve.now/CVE-2021-27914.md): A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript (CVSS 7.6, Mautic)
- [CVE-2022-1949](https://cve.now/CVE-2022-1949.md): An access control bypass vulnerability found in 389-ds-base. (no CVSS, 389-ds-base)
- [CVE-2021-26635](https://cve.now/CVE-2021-26635.md): Bandisoft ARK Library buffer overflow vulnerability (CVSS 7.8, Bandisoft International ark library)
- [CVE-2021-26634](https://cve.now/CVE-2021-26634.md): Maxboard multiple vulnerabilities (CVSS 9.8, Max Yi Maxboard)
- [CVE-2021-26633](https://cve.now/CVE-2021-26633.md): Maxboard SQL injection and LFI vulnerability (CVSS 7.5, Max Yi MaxBoard)
- [CVE-2020-20971](https://cve.now/CVE-2020-20971.md): Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index. (no CVSS)
- [CVE-2021-33254](https://cve.now/CVE-2021-33254.md): An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via (no CVSS)
- [CVE-2021-34078](https://cve.now/CVE-2021-34078.md): lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's packag (no CVSS, lifion-verify-deps)
- [CVE-2021-34079](https://cve.now/CVE-2021-34079.md): OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharac (no CVSS, docker-tester)
- [CVE-2021-34080](https://cve.now/CVE-2021-34080.md): OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell (no CVSS, ssl-utils)
- [CVE-2021-34081](https://cve.now/CVE-2021-34081.md): OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name o (no CVSS, gitsome)
- [CVE-2021-34082](https://cve.now/CVE-2021-34082.md): OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, all (no CVSS, proctree)
- [CVE-2021-34083](https://cve.now/CVE-2021-34083.md): Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. (no CVSS, google-it)
- [CVE-2021-34084](https://cve.now/CVE-2021-34084.md): OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary comm (no CVSS, s3-uploader)
- [CVE-2022-30470](https://cve.now/CVE-2022-30470.md): In Afian Filerun 20220202 Changing the "search\_tika\_path" variable to a custom (and previously uploaded) jar file results in remote code exe (no CVSS)
- [CVE-2022-29098](https://cve.now/CVE-2022-29098.md): Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. (CVSS 8.1, Dell PowerScale OneFS)
- [CVE-2020-26185](https://cve.now/CVE-2020-26185.md): Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability. (CVSS 7.5, Dell BSAFE Micro Edition Suite)
- [CVE-2020-26184](https://cve.now/CVE-2020-26184.md): Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability. (CVSS 7.5, Dell BSAFE Micro Edition Suite)
- [CVE-2022-23237](https://cve.now/CVE-2022-23237.md): E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an (no CVSS, E-Series SANtricity OS Controller Software 11.x)
- [CVE-2022-23236](https://cve.now/CVE-2022-23236.md): E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible (no CVSS, E-Series SANtricity OS Controller Software 11.x)
- [CVE-2022-30540](https://cve.now/CVE-2022-30540.md): Horner Automation Cscape Csfont (CVSS 7.8, Horner Automation Cscape Csfont)
- [CVE-2022-31342](https://cve.now/CVE-2022-31342.md): Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete\_img. (no CVSS)
- [CVE-2022-29488](https://cve.now/CVE-2022-29488.md): Horner Automation Cscape Csfont (CVSS 7.8, Horner Automation Cscape Csfont)
- [CVE-2022-28690](https://cve.now/CVE-2022-28690.md): Horner Automation Cscape Csfont (CVSS 7.8, Horner Automation Cscape Csfont)
- [CVE-2022-31343](https://cve.now/CVE-2022-31343.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view\_details&id=. (no CVSS)
- [CVE-2022-27184](https://cve.now/CVE-2022-27184.md): Horner Automation Cscape Csfont (CVSS 7.8, Horner Automation Cscape Csfont)
- [CVE-2022-31344](https://cve.now/CVE-2022-31344.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete\_booking. (no CVSS)
- [CVE-2022-31345](https://cve.now/CVE-2022-31345.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage\_user&id=. (no CVSS)
- [CVE-2022-31346](https://cve.now/CVE-2022-31346.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete\_service. (no CVSS)
- [CVE-2022-31347](https://cve.now/CVE-2022-31347.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete\_vehicle. (no CVSS)
- [CVE-2022-31348](https://cve.now/CVE-2022-31348.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update\_status.php?id=. (no CVSS)
- [CVE-2022-31350](https://cve.now/CVE-2022-31350.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage\_vehicle.php?id=. (no CVSS)
- [CVE-2022-31351](https://cve.now/CVE-2022-31351.md): Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage\_price.php?id=. (no CVSS)
- [CVE-2022-31352](https://cve.now/CVE-2022-31352.md): Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage\_service.php?id=. (no CVSS)
- [CVE-2022-31353](https://cve.now/CVE-2022-31353.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view\_service.php?id=. (no CVSS)
- [CVE-2022-31354](https://cve.now/CVE-2022-31354.md): Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get\_vehicle\_service. (no CVSS)
- [CVE-2022-31339](https://cve.now/CVE-2022-31339.md): Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php. (no CVSS)
- [CVE-2022-31340](https://cve.now/CVE-2022-31340.md): Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table\_edit\_ajax.php. (no CVSS)
- [CVE-2022-29777](https://cve.now/CVE-2022-29777.md): Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component Desktop (no CVSS)
- [CVE-2022-29776](https://cve.now/CVE-2022-29776.md): Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component Deskto (no CVSS)
- [CVE-2022-26978](https://cve.now/CVE-2022-26978.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. (no CVSS)
- [CVE-2022-26977](https://cve.now/CVE-2022-26977.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. (no CVSS)
- [CVE-2022-26976](https://cve.now/CVE-2022-26976.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. (no CVSS)
- [CVE-2022-26975](https://cve.now/CVE-2022-26975.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication. (no CVSS)
- [CVE-2022-26974](https://cve.now/CVE-2022-26974.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. (no CVSS)
- [CVE-2022-26973](https://cve.now/CVE-2022-26973.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. (no CVSS)
- [CVE-2022-26972](https://cve.now/CVE-2022-26972.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. (no CVSS)
- [CVE-2022-26971](https://cve.now/CVE-2022-26971.md): Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. (no CVSS)
- [CVE-2022-29875](https://cve.now/CVE-2022-29875.md): A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions \< VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, (no CVSS, Siemens Biograph Horizon PET/CT Systems · Siemens MAGNE… +21)
- [CVE-2022-1285](https://cve.now/CVE-2022-1285.md): Server-Side Request Forgery (SSRF) in gogs/gogs (CVSS 8.3, gogs/gogs · gogs.io/gogs)
- [CVE-2022-32200](https://cve.now/CVE-2022-32200.md): libdwarf 0.4.0 has a heap-based buffer over-read in \_dwarf\_check\_string\_valid in dwarf\_util.c. (no CVSS)
- [CVE-2022-32201](https://cve.now/CVE-2022-32201.md): In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp. (no CVSS)
- [CVE-2022-32202](https://cve.now/CVE-2022-32202.md): In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp. (no CVSS)
- [CVE-2021-44080](https://cve.now/CVE-2021-44080.md): A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators t (no CVSS)
- [CVE-2022-30490](https://cve.now/CVE-2022-30490.md): Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court\_rentals/update\_status.php. (no CVSS)
- [CVE-2022-1943](https://cve.now/CVE-2022-1943.md): A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation w (no CVSS, Kernel)
- [CVE-2022-27774](https://cve.now/CVE-2022-27774.md): An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacke (CVSS 5.7, https://github.com/curl/curl)
- [CVE-2022-27775](https://cve.now/CVE-2022-27775.md): An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connect (CVSS 7.5, https://github.com/curl/curl)
- [CVE-2022-27776](https://cve.now/CVE-2022-27776.md): A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirec (no CVSS, https://github.com/curl/curl)
- [CVE-2022-27779](https://cve.now/CVE-2022-27779.md): libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to re (no CVSS, https://github.com/curl/curl)
- [CVE-2022-27780](https://cve.now/CVE-2022-27780.md): The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a \*different (CVSS 5.3, https://github.com/curl/curl)
- [CVE-2022-27781](https://cve.now/CVE-2022-27781.md): libcurl provides the \`CURLOPT\_CERTINFO\` option to allow applications torequest details to be returned about a server's certificate chain.Due (CVSS 7.5, https://github.com/curl/curl)
- [CVE-2022-27782](https://cve.now/CVE-2022-27782.md): libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse. (CVSS 7.5, https://github.com/curl/curl)
- [CVE-2022-30115](https://cve.now/CVE-2022-30115.md): Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is prov (no CVSS, https://github.com/curl/curl)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.