# CVEs published 2022-06-12 11 CVEs were published on June 12, 2022: 0 critical, 1 high. Days are UTC. - [CVE-2022-2013](https://cve.now/CVE-2022-2013.md): In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new (no CVSS, Octopus Deploy Octopus Server) - [CVE-2022-2054](https://cve.now/CVE-2022-2054.md): Code Injection in nuitka/nuitka (CVSS 8.4, nuitka/nuitka ยท nuitka) - [CVE-2021-41641](https://cve.now/CVE-2021-41641.md): Deno \<=1.14.0 file sandbox does not handle symbolic links correctly. (no CVSS, deno) - [CVE-2021-41750](https://cve.now/CVE-2021-41750.md): A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web scr (no CVSS, nystudio107/craft-seomatic) - [CVE-2021-41749](https://cve.now/CVE-2021-41749.md): In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injectio (no CVSS, nystudio107/craft-seomatic) - [CVE-2018-25039](https://cve.now/CVE-2018-25039.md): Thomson TCW710 RgUrlBlock.asp Persistent cross site scriting (CVSS 3.5, Thomson TCW710) - [CVE-2018-25038](https://cve.now/CVE-2018-25038.md): Thomson TCW710 RgDhcp Persistent cross site scriting (CVSS 3.5, Thomson TCW710) - [CVE-2018-25037](https://cve.now/CVE-2018-25037.md): Thomson TCW710 RgDdns Persistent cross site scriting (CVSS 3.5, Thomson TCW710) - [CVE-2018-25036](https://cve.now/CVE-2018-25036.md): Thomson TCW710 RgTime Persistent cross site scriting (CVSS 3.5, Thomson TCW710) - [CVE-2018-25035](https://cve.now/CVE-2018-25035.md): Thomson TCW710 RGFirewallEL Persistent cross site scriting (CVSS 3.5, Thomson TCW710) - [CVE-2018-25034](https://cve.now/CVE-2018-25034.md): Thomson TCW710 wlanPrimaryNetwork Persistent cross site scripting (CVSS 3.5, Thomson TCW710) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2022-06-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.