CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view...5.3 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting,...5.4 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing...4.4 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request...5.0 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to...2.9 Low
- jpeg libjpegThere is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in...6.5 Medium
- thedaylightstudio fuel cmsA Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via...8.8 High
- money transfer management system project transfer management systemA Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1...8.8 High
- ideaco idealmsIdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0...9.8 Critical
- realvnc vnc serverRealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an...7.8 High
- couchbase sync gatewayCouchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication9.8 Critical
- thales dis safenet keysecureVulnerability in SafeNet KeySecure3.3 Low
- phplistPHPList Bounce Rule Persistent cross site scriting3.5 Low
- phplistPHPList Subscribe Persistent cross site scriting3.5 Low
- phplistPHPList List Name Persistent cross site scriting3.5 Low
- phplistPHPList Reflected cross site scriting4.3 Medium
- phplistPHPList Subscription sql injection6.3 Medium
- phplistPHPList information disclosure2.7 Low
- phplistPHPList Sending Campain sql injection4.7 Medium
- phplistPHPList Edit Subscription index.php sql injection7.3 High
- gnu grub2, gnu project grub +1 moreThere's a use-after-free vulnerability in grub_cmd_chainloader() function6.4 Medium
- gnu grub2, gnu project grub +1 moreThe GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot...6.7 Medium
- gnu grub2, gnu project grub, netapp active iq unified manager +2 moreOut-of-bounds write when handling split HTTP headers8.1 High
- gnu project grub, gnu grub2 +1 moreInteger underflow in grub_net_recv_ip4_packets8.1 High
- gnu grub2, redhat codeready linux builder, developer tools +9 more +11 moreA crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user...7.0 High
- gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreA heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader....4.5 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 moreA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...4.5 Medium
xmlpullOSS-FuzzSecurity exception in jaz.Zer.<clinit>No score- vim, vim vim/vim, apple macos +2 moreUse After Free in vim/vim7.4 High
- humhubHumHub privileges management5.6 Medium
- humhubHumHub DOM cross site scriting4.3 Medium
- humhubHumHub Reflected cross site scriting4.3 Medium
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log Flash Memory privileges management7.3 High
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log denial of service5.3 Medium
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log Network Config privileges management6.3 Medium
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log information disclosure7.5 High
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log File Upload privileges management6.5 Medium
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log cross-site request forgery5.3 Medium
- solare solar-log, solar-log 1000 firmware, 1000 pm\+ firmware +6 more +8 moreSolare Solar-Log Config information disclosure4.3 Medium
- apache friends xamppXAMPP Installer uncontrolled search path6.3 Medium
- istioIll-formed headers may lead to unexpected behavior in Istio7.0 High
python-ujsonMageiaUpdated python-ujson packages fix security vulnerabilityNo score- trendmicro security, trend micro security (consumer), trend micro, inc. micro security (consumer) +2 moreTrend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method...7.8 High
- trendmicro security, trend micro security (consumer), trend micro, inc. micro security (consumer) +2 moreTrend Micro Security 2022 and 2021 (Consumer) is vulnerable to an Out-Of-Bounds Read Information...5.5 Medium
- semantic-releaseExposure of Sensitive Information to an Unauthorized Actor in semantic-release4.4 Medium
- mechanize project mechanize, fedoraproject fedora +1 moreAuthorization header leak in rubygem Mechanize5.9 Medium
- glpi-project glpiSQL injection in GLPI8.1 High
- envoyproxy envoyUse after free in Envoy7.5 High
- envoyproxy envoyTrivial authentication bypass in Envoy10.0 Critical
- envoyproxy envoyReachable assertion in Envoy7.5 High
- Show moreLoading…