# CVEs published 2022-06-23

27 CVEs were published on June 23, 2022: 0 critical, 3 high. Days are UTC.

- [CVE-2022-2147](https://cve.now/CVE-2022-2147.md): Unquoted Service Path in Cloudflare WARP for Windows (CVSS 6.5, Cloudflare WARP)
- [CVE-2022-32987](https://cve.now/CVE-2022-32987.md): Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage\_account of Simple Bakery Shop Management System v1.0 allows attack (no CVSS)
- [CVE-2022-26864](https://cve.now/CVE-2022-26864.md): Prior Dell BIOS versions contain an Input Validation vulnerability. (CVSS 6.3, Dell CPG BIOS)
- [CVE-2022-26863](https://cve.now/CVE-2022-26863.md): Prior Dell BIOS versions contain an Input Validation vulnerability. (CVSS 6.3, Dell CPG BIOS)
- [CVE-2022-26862](https://cve.now/CVE-2022-26862.md): Prior Dell BIOS versions contain an Input Validation vulnerability. (CVSS 6.3, Dell CPG BIOS)
- [CVE-2021-46824](https://cve.now/CVE-2021-46824.md): Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Accoun (no CVSS)
- [CVE-2021-29055](https://cve.now/CVE-2021-29055.md): Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Acco (no CVSS)
- [CVE-2022-34013](https://cve.now/CVE-2022-34013.md): OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Logo parameter under the Link module. (no CVSS)
- [CVE-2022-34011](https://cve.now/CVE-2022-34011.md): OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the parameter entryUrls. (no CVSS)
- [CVE-2022-34012](https://cve.now/CVE-2022-34012.md): Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater (no CVSS)
- [CVE-2022-33114](https://cve.now/CVE-2022-33114.md): Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinal\_cms/system/dict/list. (no CVSS)
- [CVE-2022-33113](https://cve.now/CVE-2022-33113.md): Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under (no CVSS, com.jfinal:jfinal)
- [CVE-2022-34305](https://cve.now/CVE-2022-34305.md): XSS in examples web application (no CVSS, Apache Software Foundation Apache Tomcat · tomcat +1)
- [CVE-2021-40956](https://cve.now/CVE-2021-40956.md): LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained. (no CVSS)
- [CVE-2021-40955](https://cve.now/CVE-2021-40955.md): SQL injection exists in LaiKetui v3.5.0 the background administrator list. (no CVSS)
- [CVE-2021-40954](https://cve.now/CVE-2021-40954.md): Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code. (no CVSS)
- [CVE-2022-31009](https://cve.now/CVE-2022-31009.md): DoS vulnerability: Invalid Accent Colors (CVSS 5.7, wireapp wire-ios)
- [CVE-2017-20091](https://cve.now/CVE-2017-20091.md): File Manager Plugin cross-site request forgery (CVSS 4.3, File Manager Plugin)
- [CVE-2017-20090](https://cve.now/CVE-2017-20090.md): Global Content Blocks Plugin cross-site request forgery (CVSS 4.3, Global Content Blocks Plugin)
- [CVE-2017-20089](https://cve.now/CVE-2017-20089.md): Gwolle Guestbook Plugin cross site scriting (CVSS 3.5, Gwolle Guestbook Plugin)
- [CVE-2017-20088](https://cve.now/CVE-2017-20088.md): Atahualpa Theme cross-site request forgery (CVSS 4.3, Atahualpa Theme)
- [CVE-2017-20087](https://cve.now/CVE-2017-20087.md): Alpine PhotoTile for Instagram Plugin cross site scriting (CVSS 3.5, Alpine PhotoTile for Instagram Plugin)
- [CVE-2017-20086](https://cve.now/CVE-2017-20086.md): VaultPress Plugin code injection (CVSS 6.3, VaultPress Plugin)
- [CVE-2017-20085](https://cve.now/CVE-2017-20085.md): Atahualpa Theme cross site scriting (CVSS 3.5, Atahualpa Theme)
- [CVE-2022-2175](https://cve.now/CVE-2022-2175.md): Buffer Over-read in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-2182](https://cve.now/CVE-2022-2182.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-2183](https://cve.now/CVE-2022-2183.md): Out-of-bounds Read in vim/vim (CVSS 7.8, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.