CVEs published June 11, 2022
8 CVEs were published on June 11, 2022: 1 critical, 0 high.
- Published
- 8
- Critical
- 1
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- SICUNET Access Controller
- 4
- intelliants/subrion
- 1
Critical 1
Medium, low and unrated 7
- CVE-2021-44266GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.
- CVE-2022-30780Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connec
- CVE-2021-41502An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScriintelliants/subrion
- CVE-2021-41738ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execut
- CVE-2017-20040SICUNET Access Controller Password Storage cleartext storageSICUNET Access Controller
- CVE-2017-20038SICUNET Access Controller card_scan_decoder.php privileges managementSICUNET Access Controller
- CVE-2017-20037SICUNET Access Controller privileges managementSICUNET Access Controller