CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- itarian platform (saas / on-premise), on-premise, saas service desk +2 moreITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals9.9 Critical
- itarian on-premise, saas platform / on-premise, saas service desk +2 moreITarian - Session cookie not protected by HttpOnly flag7.5 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreCVE-2022-1973 affecting package kernel for versions less than 5.15.67.1-47.1 High
- gpacGPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards)...5.5 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.4.2 Server Crash via Item ID7.1 High
- hitachi energy txpert hub coretec 4 version, hitachienergy txpert hub coretec 4 firmware +1 moreUser authentication bypass in TXpert Hub CoreTec 46.0 Medium
- joybike wolf firmwarejoyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture...6.5 Medium
- filezilla-project filezilla client** DISPUTED ** FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH...6.5 Medium
- hitachi energy txpert hub coretec 4 version, hitachienergy txpert hub coretec 4 firmware +1 moreRemote Code Execution in TXpert Hub CoreTec 46.7 Medium
- hitachi energy txpert hub coretec 4 version, hitachienergy txpert hub coretec 4 firmware +1 moreFirmware upload verification bypass in TXpert Hub CoreTec 46.7 Medium
- samsung mobile smart things, samsung smartthings +1 moreImproper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers...3.3 Low
- samsung membersUnprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to...4.0 Medium
- samsung mobile smart things, samsung smartthings +1 morePendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers...5.5 Medium
- samsung mobile smart things, samsung smartthings +1 moreMissing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access...7.5 High
- samsung quick shareImproper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to...4.0 Medium
- samsung kiesDLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows...6.2 Medium
- samsung accountImproper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows...5.3 Medium
- samsung find my mobileSensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2...3.3 Low
- samsung find my mobileSensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7...3.3 Low
- samsung internetImproper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical...4.1 Medium
- samsung accountImproper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows...4.0 Medium
- samsung internetImproper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address...4.3 Medium
- samsung accountImplicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows...4.0 Medium
- samsung accountImproper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows...5.3 Medium
- samsung accountImproper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows...5.9 Medium
- samsung accountSensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6...4.0 Medium
- samsung accountSensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6...4.0 Medium
- samsung accountExposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6...5.5 Medium
- samsung my filesImproper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers...5.1 Medium
- samsung passImproper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess...4.6 Medium
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local...1.9 Low
- google android, samsung mobile devices +1 moreImproper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in...6.2 Medium
- samsung mobile devices, google android +1 moreUnprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to...6.2 Medium
- google android, samsung mobile devices +1 moreBroadcasting Intent including the BluetoothDevice object without proper restriction of receivers...4.0 Medium
- google android, samsung mobile devices +1 moreBroadcasting Intent including the BluetoothDevice object without proper restriction of receivers...4.0 Medium
- google android, samsung mobile devices +1 moreBroadcasting Intent including the BluetoothDevice object without proper restriction of receivers...4.0 Medium
- google android, samsung mobile devices +1 moreImplicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows...6.2 Medium
- google android, samsung mobile devices +1 moreImplicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreImproper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022...2.5 Low
- google android, samsung mobile devices +1 moreImproper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022...2.5 Low
- google android, samsung mobile devices +1 moreImproper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022...2.5 Low
- 3cx phone system firmware, debian linux +1 morePhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an...8.8 High
- 3cx phone system firmware, debian linux +1 morePhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an...8.8 High
- google android, samsung mobile devices +1 moreImproper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications...4.0 Medium
- google android, samsung mobile devices +1 moreUnprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in DofViewer prior to SMR Jun-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local...1.9 Low
- google android, samsung mobile devices +1 moreImproper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers...8.5 High
- google android, samsung mobile devices +1 moreImproper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers...8.5 High
- google android, samsung mobile devices +1 moreImproper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers...8.5 High
- Show moreLoading…