CVEs published June 23, 2022
27 CVEs were published on June 23, 2022: 0 critical, 3 high.
- Published
- 27
- Critical
- 0
- High
- 3
- Medium
- 9
- Low
- 3
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Dell CPG BIOS
- 3
- vim/vim
- 3
- Atahualpa Theme
- 2
- Alpine PhotoTile for Instagram Plugin
- 1
- Apache Software Foundation Apache Tomcat · tomcat +1
- 1
- Cloudflare WARP
- 1
- com.jfinal:jfinal
- 1
- File Manager Plugin
- 1
- Global Content Blocks Plugin
- 1
- Gwolle Guestbook Plugin
- 1
High 3
Medium, low and unrated 24
- CVE-2022-2147Unquoted Service Path in Cloudflare WARP for WindowsCloudflare WARP
- CVE-2022-32987Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attack
- CVE-2022-26864Prior Dell BIOS versions contain an Input Validation vulnerability.Dell CPG BIOS
- CVE-2022-26863Prior Dell BIOS versions contain an Input Validation vulnerability.Dell CPG BIOS
- CVE-2022-26862Prior Dell BIOS versions contain an Input Validation vulnerability.Dell CPG BIOS
- CVE-2021-46824Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Accoun
- CVE-2021-29055Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Acco
- CVE-2022-34013OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Logo parameter under the Link module.
- CVE-2022-34011OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the parameter entryUrls.
- CVE-2022-34012Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater
- CVE-2022-33114Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinal_cms/system/dict/list.
- CVE-2022-33113Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field undercom.jfinal:jfinal
- CVE-2022-34305XSS in examples web applicationApache Software Foundation Apache Tomcat · tomcat +1
- CVE-2021-40956LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
- CVE-2021-40955SQL injection exists in LaiKetui v3.5.0 the background administrator list.
- CVE-2021-40954Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
- CVE-2022-31009DoS vulnerability: Invalid Accent Colorswireapp wire-ios
- CVE-2017-20091File Manager Plugin cross-site request forgeryFile Manager Plugin
- CVE-2017-20090Global Content Blocks Plugin cross-site request forgeryGlobal Content Blocks Plugin
- CVE-2017-20089Gwolle Guestbook Plugin cross site scritingGwolle Guestbook Plugin
- CVE-2017-20088Atahualpa Theme cross-site request forgeryAtahualpa Theme
- CVE-2017-20087Alpine PhotoTile for Instagram Plugin cross site scritingAlpine PhotoTile for Instagram Plugin
- CVE-2017-20086VaultPress Plugin code injectionVaultPress Plugin
- CVE-2017-20085Atahualpa Theme cross site scritingAtahualpa Theme