CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- south gate inn online reservation system project gate inn online reservation systemThe South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that...9.8 Critical
- church management system project management systemChurch Management System version 1.0 is affected by a SQL anjection vulnerability through...9.8 Critical
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection...8.8 High
- couchbase serverCouchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized...7.5 High
- debian linux, xfce exo +1 moreXFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file...8.8 High
- electronElectron's AutoUpdater module fails to validate certain nested components of the bundle6.6 Medium
- electronExposure of Resource to Wrong Sphere in Electron2.2 Low
- couchbase serverCouchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized...6.5 Medium
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks...7.5 High
- argo events project events, argoproj argo-events +1 moreUses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events7.5 High
- biscuit-auth biscuit, biscuitsec biscuit-auth, biscuit-go +2 more +4 moreSignature forgery in Biscuit9.8 Critical
- huawei flmg-10, flmg-10 firmware +1 moreThere is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful...6.8 Medium
- huawei cv81-wdm firmwareThere is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation...9.8 Critical
- huawei cv81-wdm firmwareThere is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful...7.5 High
- huawei harmonyosThe bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this...9.8 Critical
- invisioncommunity ips community suiteA Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows...9.1 Critical
- 1234n minicmsA cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in...6.1 Medium
- powertekpdus basic pdu firmware, piml pdu firmware, pm pdu firmware +4 more +6 morePower Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows...9.8 Critical
- powertekpdus basic pdu firmware, piml pdu firmware, pm pdu firmware +4 more +6 morePower Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an...9.8 Critical
- amodat, amodat mobile application gateway +1 moreAmodat - Mobile Application Gateway SQL Injection (SQLi)5.9 Medium
- amodat, amodat mobile application gateway +1 moreAmodat - Mobile Application Gateway SQL Injection (SQLi)5.9 Medium
- amodatAmodat - Mobile Application Gateway Local File Inclusion (LFI)5.3 Medium
- elementor website builder, website builder (wordpress plugin) +1 moreWordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability4.7 Medium
- sap netweaver, sap se netweaver (ep web page composer) +1 moreSome part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document...6.5 Medium
- google kctfImproper Access Control in kctf7.5 High
- huawei emui, magic ui +1 moreMissing authorization vulnerability in the system components. Successful exploitation of this...5.5 Medium
- huawei emui, magic ui +1 moreConfiguration defects in the secure OS module. Successful exploitation of this vulnerability will...7.5 High
- huawei emui, magic ui +1 moreVulnerability of residual files not being deleted after an update in the ChinaDRM module....7.5 High
- huawei emui, magic ui +1 moreLogical defects in code implementation in some products. Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreHwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos, magic ui +2 moreThe voice wakeup module has a vulnerability of using externally-controlled format strings....7.5 High
- huawei emui, harmonyos, magic ui +2 moreThe setting module has a vulnerability of improper use of APIs. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe Device Manager has a vulnerability in multi-device interaction. Successful exploitation of...7.5 High
- huawei emui, harmonyos, magic ui +2 moreDialog boxes can still be displayed even if the screen is locked in carrier-customized USSD...9.1 Critical
- huawei emui, harmonyos, magic ui +2 moreThe AMS module has a vulnerability in input validation. Successful exploitation of this...7.8 High
- huawei emui, harmonyos, magic ui +2 moreAppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThe communication module has a vulnerability of improper permission preservation. Successful...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThe fingerprint sensor module has design defects. Successful exploitation of this vulnerability...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThe kernel emcom module has multi-thread contention. Successful exploitation of this...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThe kernel module has the race condition vulnerability. Successful exploitation of this...4.7 Medium
- huawei emui, harmonyos +1 moreThe kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThe video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation...7.5 High
- festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 moreFESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability9.8 Critical
- festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 moreFESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability9.8 Critical
- festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 moreFESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability9.8 Critical
- festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 moreFESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability9.8 Critical
- naver cloud explorer, cloud explorer beta +1 moreNaver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via...7.8 High
- Show moreLoading…