CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- nocodb, nocodb nocodb/nocodb +1 moreGeneration of Error Message Containing Sensitive Information in nocodb/nocodb9.1 Critical
- octopus deploy server, octopus deploy +1 moreIn Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled...7.5 High
- nuitka, nuitka nuitka/nuitka +1 moreCode Injection in nuitka/nuitka8.4 High
- denoLink Following in Deno8.4 High
- nystudio107 seomaticCross-site Scripting in SEOmatic plugin6.1 Medium
- nystudio107 seomaticCode Injection in SEOmatic9.8 Critical
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgUrlBlock.asp Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgDhcp Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgDdns Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RgTime Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 RGFirewallEL Persistent cross site scriting3.5 Low
- thomson tcw710, technicolor thomson tcw710 firmware +1 moreThomson TCW710 wlanPrimaryNetwork Persistent cross site scripting3.5 Low
systemdOSS-FuzzHeap-double-free in nft_set_context_free_manyNo scorefileOSS-FuzzHeap-buffer-overflow in json_parseNo score- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote...9.3 Critical
- google chrome, fedoraproject fedora +1 moreDouble free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...8.8 High
- gunet open eclass platformGUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php...6.1 Medium
- lighttpdLighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU...7.5 High
- intelliants subrion cmsCross site scripting in intelliants/subrion5.4 Medium
- zeroshellZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which...8.8 High
- dalek-cryptography ed25519-dalek`ed25519-dalek` Double Public Key Signing Function Oracle Attack5.9 Medium
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller Password Storage cleartext storage5.9 Medium
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller hard-coded password9.8 Critical
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller card_scan_decoder.php privileges management6.3 Medium
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller privileges management6.3 Medium
- debian linux, linux kernel, redhat enterprise linux +2 more +4 moreA vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw...5.5 Medium
- linux kernel, redhat enterprise linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a...5.5 Medium
- dynamicvision dynamicmarktdynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php.9.8 Critical
- dynamicvision dynamicmarktdynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php.9.8 Critical
- dynamicvision dynamicmarktdynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php.9.8 Critical
- jpeg-js project jpeg-jsDenial of Service (DoS)7.5 High
- posix project posixDenial of Service (DoS)5.9 Medium
- alibaba fastjson, oracle communications cloud native core unified data repository +1 moreDeserialization of Untrusted Data8.1 High
- convert-svg project convert-svgDirectory Traversal7.5 High
- git-promise project git-promiseCommand Injection7.2 High
- dell supportassist consumer, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client...8.3 High
- dell supportassist client consumer, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist...7.1 High
- dell supportassist client commercial, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist...7.1 High
- dell supportassist consumer, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist...7.8 High
- convert-svg-core project convert-svg-coreArbitrary Code Injection7.5 High
django-jsonformPyPICross Site Scripting vulnerability in django-jsonform's admin form.No score- linux kernelAn issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is...7.8 High
- axiosys bento4An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core...5.5 Medium
- axiosys bento4Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at ...5.5 Medium
- netwavepr indoor ip camera firmware, outdoor ip camera firmware +1 moreThere is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an...7.5 High
- combodo itopITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop...6.1 Medium
- lepin ep-kp001 project lepinep-kp001 firmwareDue to an insecure design, the Lepin EP-KP001 flash drive through KP001_V19 is vulnerable to an...4.6 Medium
- Show moreLoading…