# CVEs published 2022-06-06

103 CVEs were published on June 6, 2022: 6 critical, 9 high. Days are UTC.

- [CVE-2022-29296](https://cve.now/CVE-2022-29296.md): A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbit (no CVSS)
- [CVE-2022-31494](https://cve.now/CVE-2022-31494.md): LibreHealth EHR Base 2.0.0 allows gacl/admin/acl\_admin.php action XSS. (no CVSS)
- [CVE-2022-27438](https://cve.now/CVE-2022-27438.md): Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affect (no CVSS)
- [CVE-2022-28051](https://cve.now/CVE-2022-28051.md): The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allo (no CVSS)
- [CVE-2022-28478](https://cve.now/CVE-2022-28478.md): SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. (no CVSS)
- [CVE-2022-28479](https://cve.now/CVE-2022-28479.md): SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. (no CVSS)
- [CVE-2022-30927](https://cve.now/CVE-2022-30927.md): A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. (no CVSS)
- [CVE-2022-24969](https://cve.now/CVE-2022-24969.md): bypass of CVE-2021-25640 (no CVSS, Apache Software Foundation Apache Dubbo · org.apache.dub… +1)
- [CVE-2022-32511](https://cve.now/CVE-2022-32511.md): jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable. (no CVSS, jmespath)
- [CVE-2022-31027](https://cve.now/CVE-2022-31027.md): Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator (CVSS 4.2, jupyterhub oauthenticator · oauthenticator)
- [CVE-2022-31019](https://cve.now/CVE-2022-31019.md): DoS Vulnerability in URLEncodedFormDecoder in Vapor (CVSS 7.5, vapor)
- [CVE-2022-31026](https://cve.now/CVE-2022-31026.md): Use of Uninitialized Variable in trilogy (CVSS 5.9, github trilogy · trilogy)
- [CVE-2022-31498](https://cve.now/CVE-2022-31498.md): LibreHealth EHR Base 2.0.0 allows interface/orders/patient\_match\_dialog.php key XSS. (no CVSS)
- [CVE-2022-30469](https://cve.now/CVE-2022-30469.md): In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata\[\]" in \`/?module=fileman&section=get&page=grid\` leads to SQL (no CVSS)
- [CVE-2022-29631](https://cve.now/CVE-2022-29631.md): Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and \`jodd.ht (no CVSS, org.jodd:jodd-http)
- [CVE-2022-31492](https://cve.now/CVE-2022-31492.md): Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup\_admin\_add.php Username. (no CVSS)
- [CVE-2022-29255](https://cve.now/CVE-2022-29255.md): Multiple evaluation of contract address in call in vyper (CVSS 8.2, vyperlang vyper · vyper)
- [CVE-2022-30587](https://cve.now/CVE-2022-30587.md): Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure. (no CVSS)
- [CVE-2020-6220](https://cve.now/CVE-2020-6220.md): BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled (CVSS 4.4, SAP SE SAP Business Objects Business Intelligence Platform)
- [CVE-2022-29617](https://cve.now/CVE-2022-29617.md): Due to improper error handling an authenticated user can crash CLA assistant instance. (no CVSS, SAP SE CLA Assistant)
- [CVE-2022-29254](https://cve.now/CVE-2022-29254.md): Failed payment recorded has completed in silverstripe/silverstripe-omnipay (CVSS 3.7, silverstripe-omnipay · silverstripe/silverstripe-omnipay)
- [CVE-2022-24896](https://cve.now/CVE-2022-24896.md): Tracker report renderer and chart widgets leak information in Tuleap (CVSS 4.3, Enalean tuleap)
- [CVE-2022-24840](https://cve.now/CVE-2022-24840.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in django-s3file (CVSS 9.1, codingjoe django-s3file · django-s3file)
- [CVE-2022-30586](https://cve.now/CVE-2022-30586.md): Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution. (no CVSS)
- [CVE-2022-32275](https://cve.now/CVE-2022-32275.md): Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. (CVSS 7.5)
- [CVE-2022-31493](https://cve.now/CVE-2022-31493.md): LibreHealth EHR Base 2.0.0 allows gacl/admin/acl\_admin.php acl\_id XSS. (no CVSS)
- [CVE-2022-21762](https://cve.now/CVE-2022-21762.md): In apusys driver, there is a possible system crash due to an integer overflow. (no CVSS, MediaTek MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, M…)
- [CVE-2022-21761](https://cve.now/CVE-2022-21761.md): In apusys driver, there is a possible system crash due to an integer overflow. (no CVSS, MediaTek MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, M…)
- [CVE-2022-21760](https://cve.now/CVE-2022-21760.md): In apusys driver, there is a possible system crash due to an integer overflow. (no CVSS, MediaTek MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, M…)
- [CVE-2022-21759](https://cve.now/CVE-2022-21759.md): In power service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6735, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2022-21758](https://cve.now/CVE-2022-21758.md): In ccu, there is a possible memory corruption due to a double free. (no CVSS, MediaTek MT6833, MT6853, MT6873, MT6877, MT6885, MT6893)
- [CVE-2022-21757](https://cve.now/CVE-2022-21757.md): In WIFI Firmware, there is a possible system crash due to a missing count check. (no CVSS, MediaTek MT6833, MT6853, MT6877, MT6885, MT6889, MT6983, MT…)
- [CVE-2022-21756](https://cve.now/CVE-2022-21756.md): In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, M…)
- [CVE-2022-21755](https://cve.now/CVE-2022-21755.md): In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT…)
- [CVE-2022-21754](https://cve.now/CVE-2022-21754.md): In WLAN driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT…)
- [CVE-2022-21753](https://cve.now/CVE-2022-21753.md): In WLAN driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6735, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2022-21752](https://cve.now/CVE-2022-21752.md): In WLAN driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6735, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2022-21751](https://cve.now/CVE-2022-21751.md): In WLAN driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6771, MT8167S, MT8168, MT8175, MT8183, MT8185, M…)
- [CVE-2022-21750](https://cve.now/CVE-2022-21750.md): In WLAN driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT…)
- [CVE-2022-21749](https://cve.now/CVE-2022-21749.md): In telephony, there is a possible information disclosure due to a missing permission check. (no CVSS, MediaTek MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, M…)
- [CVE-2022-21748](https://cve.now/CVE-2022-21748.md): In telephony, there is a possible information disclosure due to a missing permission check. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2022-21747](https://cve.now/CVE-2022-21747.md): In imgsensor, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT…)
- [CVE-2022-21746](https://cve.now/CVE-2022-21746.md): In imgsensor, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT…)
- [CVE-2022-21745](https://cve.now/CVE-2022-21745.md): In WIFI Firmware, there is a possible memory corruption due to a use after free. (no CVSS, MediaTek MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT…)
- [CVE-2022-28224](https://cve.now/CVE-2022-28224.md): Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature (CVSS 5.5, Tigera Calico Enterprise · Project Calico Calico +1)
- [CVE-2022-23712](https://cve.now/CVE-2022-23712.md): A Denial of Service flaw was discovered in Elasticsearch. (no CVSS, elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2022-1680](https://cve.now/CVE-2022-1680.md): An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting f (CVSS 9.9, GitLab)
- [CVE-2022-1783](https://cve.now/CVE-2022-1783.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 befor (CVSS 2.7, GitLab)
- [CVE-2022-1944](https://cve.now/CVE-2022-1944.md): When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prio (CVSS 5.4, GitLab)
- [CVE-2022-1821](https://cve.now/CVE-2022-1821.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 befor (CVSS 4.3, GitLab)
- [CVE-2022-1936](https://cve.now/CVE-2022-1936.md): Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all ve (CVSS 6.5, GitLab)
- [CVE-2022-1940](https://cve.now/CVE-2022-1940.md): A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior (CVSS 7.7, GitLab)
- [CVE-2022-1935](https://cve.now/CVE-2022-1935.md): Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all ve (CVSS 6.5, GitLab)
- [CVE-2021-39947](https://cve.now/CVE-2021-39947.md): In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the fi (CVSS 5.3, GitLab Runner)
- [CVE-2022-31486](https://cve.now/CVE-2022-31486.md): Command injection via Advanced Networking route add functionality (CVSS 8.8, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31485](https://cve.now/CVE-2022-31485.md): Unauthenticated homepage note modification (CVSS 5.3, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31484](https://cve.now/CVE-2022-31484.md): User Account Deletion Unauthenticated (CVSS 7.5, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31483](https://cve.now/CVE-2022-31483.md): Arbitrary file write via authenticated OSDP file upload (CVSS 9.1, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31482](https://cve.now/CVE-2022-31482.md): Denial-of-Service via internal structure overflow (CVSS 7.5, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31481](https://cve.now/CVE-2022-31481.md): Remote Code Execution via buffer overflow in firmware update process (CVSS 10.0, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31480](https://cve.now/CVE-2022-31480.md): Unauthenticated Firmware Upload and Arbitrary Reboot (CVSS 7.5, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-31479](https://cve.now/CVE-2022-31479.md): Remote Code Execution via command injection of the hostname (CVSS 9.6, LenelS2 LNL-X2210 · LenelS2 LNL-X2220 +12)
- [CVE-2022-22396](https://cve.now/CVE-2022-22396.md): Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. (CVSS 6.8, IBM Spectrum Protect Plus)
- [CVE-2022-31768](https://cve.now/CVE-2022-31768.md): IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2021-41932](https://cve.now/CVE-2021-41932.md): A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQ (no CVSS)
- [CVE-2022-30863](https://cve.now/CVE-2022-30863.md): FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page\_title param in Page Manager in the Admin Control Panel. (no CVSS)
- [CVE-2022-30861](https://cve.now/CVE-2022-30861.md): FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature. (no CVSS)
- [CVE-2022-30860](https://cve.now/CVE-2022-30860.md): FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel. (no CVSS)
- [CVE-2021-42245](https://cve.now/CVE-2021-42245.md): FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections. (no CVSS)
- [CVE-2022-1997](https://cve.now/CVE-2022-1997.md): Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis (CVSS 8.8, francoisjacquet/rosariosis)
- [CVE-2022-1712](https://cve.now/CVE-2022-1712.md): LiveSync for WordPress \<= 1.0 - Arbitrary Settings Update via CSRF (no CVSS, LiveSync for WordPress)
- [CVE-2022-1709](https://cve.now/CVE-2022-1709.md): Throws SPAM Away \< 3.3.1 - Comment Deletion via CSRF (no CVSS, Throws SPAM Away)
- [CVE-2022-1695](https://cve.now/CVE-2022-1695.md): WP Simple Adsense Insertion \< 2.1 - Inject ads and javascript via CSRF (no CVSS, WP Simple Adsense Insertion)
- [CVE-2022-1692](https://cve.now/CVE-2022-1692.md): CP Image Store with Slideshow \< 1.0.68 - Unauthenticated SQLi (no CVSS, CP Image Store with Slideshow)
- [CVE-2022-1691](https://cve.now/CVE-2022-1691.md): Realty Workstation \< 1.0.15 - Agent SQLi (no CVSS, Realty Workstation)
- [CVE-2022-1690](https://cve.now/CVE-2022-1690.md): Note Press \<= 0.1.10 - Admin+ SQLi via Bulk Actions (no CVSS, Note Press)
- [CVE-2022-1689](https://cve.now/CVE-2022-1689.md): Note Press \<= 0.1.10 - Admin+ SQLi via Update (no CVSS, Note Press)
- [CVE-2022-1688](https://cve.now/CVE-2022-1688.md): Note Press \<= 0.1.10 - Admin+ SQLi via id (no CVSS, Note Press)
- [CVE-2022-1687](https://cve.now/CVE-2022-1687.md): Logo Slider \<= 1.4.8 - Admin+ SQLi (no CVSS, Logo Slider)
- [CVE-2022-1686](https://cve.now/CVE-2022-1686.md): Five Minute Webshop \<= 1.3.2 - Admin+ SQLi via id (no CVSS, Five Minute Webshop)
- [CVE-2022-1685](https://cve.now/CVE-2022-1685.md): Five Minute Webshop \<= 1.3.2 - Admin+ SQLi via orderby (no CVSS, Five Minute Webshop)
- [CVE-2022-1684](https://cve.now/CVE-2022-1684.md): Cube Slider \<= 1.2 - Admin+ SQLi (no CVSS, CUBE SLIDER)
- [CVE-2022-1683](https://cve.now/CVE-2022-1683.md): amtyThumb \<= 4.2.0 - Subscriber+ SQLi (no CVSS, amtyThumb)
- [CVE-2022-1673](https://cve.now/CVE-2022-1673.md): WooCommerce Green Wallet Gateway \< 1.0.2 - Reflected Cross Site Scripting in checkout page (no CVSS, WooCommerce Green Wallet Gateway)
- [CVE-2022-1647](https://cve.now/CVE-2022-1647.md): FormCraft Basic \< 1.2.6 - Admin+ Stored Cross Site Scripting (no CVSS, FormCraft – Contact Form Builder for WordPress)
- [CVE-2022-1598](https://cve.now/CVE-2022-1598.md): WPQA \< 5.5 - Unauthenticated Private Message Disclosure (no CVSS, WPQA Builder)
- [CVE-2022-1597](https://cve.now/CVE-2022-1597.md): WPQA \< 5.4 - Reflected Cross-Site Scripting (no CVSS, WPQA Builder)
- [CVE-2022-1577](https://cve.now/CVE-2022-1577.md): Database Backup for WordPress \< 2.5.2 - Arbitrary Schedule Settings Update via CSRF (no CVSS, Database Backup for WordPress)
- [CVE-2022-1570](https://cve.now/CVE-2022-1570.md): Files Download Delay \< 1.0.7 - Subscriber+ Settings Reset (no CVSS, Files Download Delay)
- [CVE-2022-1569](https://cve.now/CVE-2022-1569.md): WordPress Forms by Pie Forms \< 1.4.9.4 - Admin+ Stored Cross-Site Scripting (no CVSS, Drag & Drop Builder, Human Face Detector, Pre-built Templat…)
- [CVE-2022-1541](https://cve.now/CVE-2022-1541.md): Video Slider - Slider Carousel \< 1.4.8 - Admin+ Stored Cross-Site Scripting (no CVSS, Video Slider – Slider Carousel)
- [CVE-2022-1506](https://cve.now/CVE-2022-1506.md): WP Born Babies \<= 1.0 - Contributor+ Stored Cross-Site Scripting (no CVSS, WP BORN BABIES PLUGIN)
- [CVE-2022-1469](https://cve.now/CVE-2022-1469.md): FiboSearch \< 1.18.0 - Admin+ Stored Cross-Site Scripting (no CVSS, FiboSearch – Ajax Search for WooCommerce)
- [CVE-2022-1424](https://cve.now/CVE-2022-1424.md): Ask Me \< 6.8.2 - Multiple CSRF in AJAX Actions (no CVSS, Ask me)
- [CVE-2022-1422](https://cve.now/CVE-2022-1422.md): Discy \< 5.2 - Restore Default Settings via CSRF (no CVSS, Discy)
- [CVE-2022-1421](https://cve.now/CVE-2022-1421.md): Discy \< 5.2 - Settings Update via CSRF (no CVSS, Discy)
- [CVE-2022-1394](https://cve.now/CVE-2022-1394.md): Photo Gallery \< 1.6.4 - Admin+ Stored Cross-Site Scripting (no CVSS, Photo Gallery by 10Web – Mobile-Friendly Image Gallery)
- [CVE-2022-1241](https://cve.now/CVE-2022-1241.md): Ask Me \< 6.8.2 - Reflected Cross-Site Scripting (no CVSS, Ask me)
- [CVE-2022-1005](https://cve.now/CVE-2022-1005.md): WP Statistics \< 13.2.2 - Reflected Cross-Site Scripting (no CVSS, WP Statistics)
- [CVE-2022-0788](https://cve.now/CVE-2022-0788.md): WP Fundraising Donation and Crowdfunding Platform \< 1.5.0 - Unauthenticated SQLi (no CVSS, WP Fundraising Donation and Crowdfunding Platform)
- [CVE-2022-0779](https://cve.now/CVE-2022-0779.md): User Meta \< 2.4.4 - Subscriber+ Local File Enumeration via Path Traversal (no CVSS, User Meta – User Profile Builder and User management plugin)
- [CVE-2022-1996](https://cve.now/CVE-2022-1996.md): Authorization Bypass Through User-Controlled Key in emicklei/go-restful (CVSS 9.3, emicklei/go-restful · github.com/emicklei/go-restful +2)
- [CVE-2022-31030](https://cve.now/CVE-2022-31030.md): containerd CRI plugin: Host memory exhaustion through ExecSync (CVSS 5.5, containerd · github.com/containerd/containerd)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.