CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- unknown wp athletics, wp athletics project athletics +1 moreWP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- themify woocommerce product filter, unknown themify – woocommerce product filter +1 moreThemify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting6.1 Medium
- premierethemes log wp mailLog WP_Mail <= 0.1 - Email Logs Publicly Accessible7.5 High
- ceikay carousel ckCarousel CK <= 1.1.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- ceikay slideshow ckSlideshow CK < 1.4.10 - Admin+ Stored Cross-Site Scripting4.8 Medium
- usabilitydynamics wp-crm, unknown wp-crm – customer relations management for wordpress +1 moreWP-CRM <= 1.2.1 - CSV Injection7.8 High
- memberhero member heroMember Hero <= 1.0.9 - Unauthenticated RCE9.8 Critical
- unknown wp svg icons, wp svg icons project svg icons +1 moreWP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)7.2 High
- presspage bestbooksBestbooks <= 2.6.3 - Unauthenticated SQLi9.8 Critical
- artbees jupiterx, jupiter x, jupiter x core +2 moreJupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification5.4 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare < 2.3.9 - Unauthenticated SQLi9.8 Critical
- likebtn like button rating, unknown like button rating ♥ likebtn +1 moreLike Button Rating < 2.6.45 - Arbitrary e-mail Sending6.5 Medium
- kuroit advanced admin searchAdvanced Admin Search < 1.1.6 - Reflected Cross-Site Scripting6.1 Medium
- enqueue anything project anything, unknown enqueue anything +1 moreEnqueue Anything <= 1.0.1 - Subscriber+ Arbitrary Asset/Post Deletion6.5 Medium
- maykinmedia open forms, open-formulieren open-forms +1 moreInsufficient content-type validation for uploaded files in open-forms7.6 High
- dylanjkotze zephyr project manager, zephyr project manager project project manager +1 moreZephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting6.1 Medium
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreSQL Injection in francoisjacquet/rosariosis8.8 High
- flatcore flatcore-cmsflatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page"...5.4 Medium
- adobe premiere, premiere pro +1 moreAdobe Premiere Pro M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- adobe media encoderAdobe Media Encoder M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- facturascripts, neorazorx neorazorx/facturascripts +1 moreCross-site Scripting (XSS) - Reflected in neorazorx/facturascripts7.1 High
- facturascripts, neorazorx neorazorx/facturascripts +1 moreCross-site Scripting (XSS) - Stored in neorazorx/facturascripts8.6 High
- maykinmedia open forms, open-formulieren open-forms +1 moreOpen Redirect in open-forms7.1 High
- adobe media encoderAdobe Media Encoder M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- nocodb, nocodb nocodb/nocodb +1 moreInsufficient Session Expiration in nocodb/nocodb9.1 Critical
- chafa project chafa, hpjansson hpjansson/chafa +1 moreHeap-based Buffer Overflow in hpjansson/chafa2.8 Low
- nocodb, nocodb nocodb/nocodb +1 moreImproper Privilege Management in nocodb/nocodb9.0 Critical
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreCross-site Scripting (XSS) - Stored in dolibarr/dolibarr8.4 High
- otrsInformation disclosure in Request New Password feature5.3 Medium
- otrsInformation disclosure in the External Interface3.5 Low
- otrs, otrs calendar resource planning, otrs ag otrscalendarresourceplanning +2 moreOTRS version number is always in the exported ICS files3.5 Low
- apache hadoopHeap buffer overflow in libhdfs native library9.8 Critical
- navetti pricepointNavetti PricePoint cross-site request forgery7.3 High
- navetti pricepointNavetti PricePoint Reflected cross site scriting4.3 Medium
- navetti pricepointNavetti PricePoint Persistent cross site scriting4.3 Medium
- navetti pricepointNavetti PricePoint Blind sql injection6.3 Medium
- ucweb uc browserUcweb UC Browser HTML URL improper restriction of rendered ui layers5.4 Medium
- strapiCross-site Scripting in Strapi4.8 Medium
- rakuten casaRakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a...9.8 Critical
- rakuten casaImproper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a...7.2 High
- veronalabs wp statisticsCross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it...6.1 Medium
- coremobile co. ltd. easy blog for ec-cube4, easy blog project blog +1 moreCross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier...4.3 Medium
- rakuten casaImproper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a...7.5 High
- abb rccmdDirectory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated...6.5 Medium
libicalOSS-FuzzStack-buffer-overflow in simple_str_to_doublestrNo scoresystemdOSS-FuzzHeap-double-free in nft_set_context_free_manyNo scoresystemdOSS-FuzzHeap-double-free in config_parse_nft_set_contextNo scoretmuxOSS-FuzzStack-buffer-overflow in input_osc_52No score- php, debian linux +1 moremysqlnd/pdo password buffer overflow7.5 High
- php, debian linux +1 moreFreeing unallocated memory in php_pgsql_free_params()8.1 High
- Show moreLoading…