# CVEs published 2022-06-11

8 CVEs were published on June 11, 2022: 1 critical, 0 high. Days are UTC.

- [CVE-2021-44266](https://cve.now/CVE-2021-44266.md): GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter. (no CVSS)
- [CVE-2022-30780](https://cve.now/CVE-2022-30780.md): Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connec (no CVSS)
- [CVE-2021-41502](https://cve.now/CVE-2021-41502.md): An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScri (no CVSS, intelliants/subrion)
- [CVE-2021-41738](https://cve.now/CVE-2021-41738.md): ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execut (no CVSS)
- [CVE-2017-20040](https://cve.now/CVE-2017-20040.md): SICUNET Access Controller Password Storage cleartext storage (CVSS 5.9, SICUNET Access Controller)
- [CVE-2017-20039](https://cve.now/CVE-2017-20039.md): SICUNET Access Controller hard-coded password (CVSS 9.8, SICUNET Access Controller)
- [CVE-2017-20038](https://cve.now/CVE-2017-20038.md): SICUNET Access Controller card\_scan\_decoder.php privileges management (CVSS 6.3, SICUNET Access Controller)
- [CVE-2017-20037](https://cve.now/CVE-2017-20037.md): SICUNET Access Controller privileges management (CVSS 6.3, SICUNET Access Controller)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.