CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- amperecomputing ampere altra firmware, ampere altra max firmware +1 more On Ampere Altra and AltraMax devices before SRP 1.09, the the Altra reference design of UEFI... 9.8 Critical
- automox The Automox Agent installation package before 37 on macOS allows an unprivileged user to obtain... 7.0 High
- viaviweb ebook SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book... 9.8 Critical
- asus dsl-n14u-b1 firmware Cross Site Scripting (XSS) vulnerability in router Asus DSL-N14U-B1 1.1.2.3_805 via the "*list"... 5.4 Medium
- tp-link archer a5 firmware, archer c50 firmware +1 more A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407... 7.5 High
- ecisp espcms-p8 ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability... 7.2 High
- amazon opensearch, opensearch-project opensearch-ruby +1 more Unsafe YAML deserialization in opensearch-ruby 8.8 High
- openpolicyagent open policy agent Denial of service in Open Policy Agent 7.5 High
- mozilla thunderbird An OpenPGP digital signature includes information about the date when the signature was created.... 6.5 Medium
- manageiq awesomespawn OS Command Injection in awesome spawn 9.8 Critical
- redhat openshift-origin-node-util It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log... 5.5 Medium
- ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances 7.7 High
- ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file 7.5 High
- ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests 7.2 High
- ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution 7.6 High
- ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 denial of service condition 5.0 Medium
- ping identity pingid mac login, pingidentity pingid integration for mac login +1 more PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks 7.7 High
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server action endpoints... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server action endpoints... 9.1 Critical
- robustel r1510, r1510 firmware +1 more Multiple command injection vulnerabilities exist in the web_server action endpoints... 9.1 Critical
- robustel r1510, r1510 firmware +1 more A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0.... 9.1 Critical
- robustel r1510, r1510 firmware +1 more A data removal vulnerability exists in the web_server /action/remove/ API functionality of... 8.7 High
- exemys rme1-ai firmware, rme1 firmware +1 more Exemys RME1 9.8 Critical
- redhat openshift In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary... 9.1 Critical
- jenkins failed job deactivator, jenkins project failed job deactivator plugin +1 more Jenkins Failed Job Deactivator Plugin Missing Authorization vulnerability 4.3 Medium
- jenkins failed job deactivator, jenkins project failed job deactivator plugin +1 more Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin 4.3 Medium
- jenkins hpe network virtualization, jenkins project hpe network virtualization plugin +1 more Passwords stored in plain text by Jenkins hpe-network-virtualization plugin 6.5 Medium
- jenkins request rename or delete, jenkins project request rename or delete plugin +1 more Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin 4.3 Medium
- jenkins request rename or delete, jenkins project request rename or delete plugin +1 more Incorrect Authorization in Jenkins Request Rename Or Delete Plugin 4.3 Medium
- jenkins xpath configuration viewer, jenkins project xpath configuration viewer plugin +1 more Jenkins XPath Configuration Viewer Plugin Missing Authorization vulnerability 4.3 Medium
- jenkins xpath configuration viewer, jenkins project xpath configuration viewer plugin +1 more Cross-Site Request Forgery in Jenkins XPath Configuration Viewer Plugin 4.3 Medium
- jenkins xpath configuration viewer, jenkins project xpath configuration viewer plugin +1 more Missing Authorization in Jenkins XPath Configuration Viewer Plugin 4.3 Medium
- jenkins rqm, jenkins project rqm plugin +1 more Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check 6.5 Medium
- jenkins rqm, jenkins project rqm plugin +1 more Password stored in plain text by Jenkins RQM Plugin 6.5 Medium
- jenkins cisco spark, jenkins project cisco spark plugin +1 more Token stored in plain text by Jenkins Cisco Spark Plugin 4.3 Medium
- jenkins elasticsearch query, jenkins project elasticsearch query plugin +1 more Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin 6.5 Medium
- jenkins jigomerge, jenkins project jigomerge plugin +1 more Plaintext Storage of a Password in Jenkins Jigomerge Plugin 6.5 Medium
- jenkins skype notifier, jenkins project skype notifier plugin +1 more Plaintext Storage of a Password in Jenkins Skype notifier Plugin 6.5 Medium
- jenkins opsgenie, jenkins project opsgenie plugin +1 more Jenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information 4.3 Medium
- jenkins opsgenie, jenkins project opsgenie plugin +1 more Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability 4.3 Medium
- jenkins rocketchat notifier, jenkins project rocketchat notifier plugin +1 more Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin 4.3 Medium
- jenkins build notifications, jenkins project build notifications plugin +1 more Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin 4.3 Medium
- jenkins build notifications, jenkins project build notifications plugin +1 more Plaintext Storage of a Password in Jenkins Build Notifications Plugin 4.3 Medium
- jenkins deployment dashboard, jenkins project deployment dashboard plugin +1 more Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin 4.3 Medium
- jenkins deployment dashboard, jenkins project deployment dashboard plugin +1 more Missing Authorization in Jenkins Deployment Dashboard Plugin 4.3 Medium
- Show olderLoading…