# CVEs published 2022-06-25

7 CVEs were published on June 25, 2022: 1 critical, 1 high. Days are UTC.

- [CVE-2022-29931](https://cve.now/CVE-2022-29931.md): The administration interface of the Raytion Custom Security Manager (Raytion CSM) in Version 7.2.0 allows reflected Cross-site Scripting (XS (CVSS 6.1)
- [CVE-2022-31017](https://cve.now/CVE-2022-31017.md): Expression Always True vulnerability in Zulip Server (CVSS 2.0, zulip)
- [CVE-2022-31016](https://cve.now/CVE-2022-31016.md): Argo CD vulnerable to Uncontrolled Memory Consumption (CVSS 6.5, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-29168](https://cve.now/CVE-2022-29168.md): Cross Site Scripting in Wire Messages (CVSS 9.6, wireapp wire-webapp)
- [CVE-2022-24893](https://cve.now/CVE-2022-24893.md): Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption (CVSS 7.5, espressif esp-idf)
- [CVE-2019-25071](https://cve.now/CVE-2019-25071.md): Apple iOS Siri Self privileges management (CVSS 6.3, Apple iOS)
- [CVE-2022-33128](https://cve.now/CVE-2022-33128.md): RG-EG series gateway EG350 EG\_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get\_alarmAction at /alar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.