CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- apache nifi, nifi registry +1 moreImproper Neutralization of Command Elements in Shell User Group Provider8.8 High
- apache hadoopApache Hadoop Privilege escalation vulnerability8.8 High
- dynamicweblab wordpress team manager (wordpress plugin), wp-team-manager +1 moreWordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- nicdark nd-travel, nicdark d.o.o. travel management (wordpress plugin) +1 moreWordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- bank management system project management system, sourcecodester bank management system +1 moreSourceCodester Bank Management System cross site scripting3.5 Low
- bank management system project management system, sourcecodester bank management system +1 moreSourceCodester Bank Management System login.php sql injection6.3 Medium
- asylumdigital age gate, phil baker age gate (wordpress plugin) +1 moreWordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability6.1 Medium
- ok-file-formats project ok-file-formatsok-file-formats master 2021-9-12 is affected by a buffer overflow in...7.8 High
- daum potplayerAn exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to...9.8 Critical
- codelathe filecloudFileCloud NTFS access control6.3 Medium
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_dnsNo scorendpiOSS-FuzzUNKNOWN READ in ndpi_strdupNo scorelibjxlOSS-FuzzHeap-buffer-overflow in jxl::JxlBoxContentDecoder::ProcessNo scoretzdataDebiantzdata - new timezone databaseNo score- google androidIn multiple functions of AvatarPhotoController.java, there is a possible access to content owned...7.8 High
- google androidIn deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset...7.8 High
- sap 3d visual enterprise viewerWhen a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from...5.5 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +12 more +14 more.NET and Visual Studio Information Disclosure Vulnerability5.5 Medium
- edgexfoundry edgex foundry, edgex-go +1 moreConfiguration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users5.9 Medium
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +4 more +6 moreSMBv3 FileNormalizedNameInformation NULL Pointer Dereference7.5 High
- typo3Insufficient Session Expiration in TYPO3 Admin Tool6.0 Medium
- typo3Cross-Site Scripting in Form Framework5.4 Medium
- typo3Cross-Site Scripting in Frontend Login Mailer5.4 Medium
- typo3Information Disclosure via Export Module in TYPO3 CMS4.3 Medium
- jupyter server, jupyter-server jupyter server +1 moreKnown or guessable hidden files may be accessed in Jupyter Server7.1 High
- typo3Insertion of Sensitive Information into Log File in typo3/cms-core5.3 Medium
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories...7.2 High
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user...7.2 High
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products...7.2 High
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f...7.2 High
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f...7.2 High
- discourseBanner topic data is exposed on login-required Discourse sites5.3 Medium
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories...7.2 High
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories...7.2 High
- discourse calendar, discourse-calendar +1 moreDiscourse Calendar Event names susceptible to Cross-site Scripting6.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources...5.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted...5.5 Medium
- sap se financial consolidation, sap adaptive server enterprise +1 moreSAP Financial Consolidation - version 1010,?does not perform necessary authorization checks for...8.8 High
- sap adaptive server enterprise, sap se adaptive server enterprise (ase) +1 moreA highly privileged user can exploit SUID-root program to escalate his privileges to root on a...6.7 Medium
- sap powerdesigner proxy, sap se powerdesigner proxy 16.7 +1 moreSAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local...7.8 High
- sap erp financial accounting, erp localization for cee countries, s\/4hana +3 more +5 moreDue to improper authorization check, business users who are using Israeli File from SHAAM program...6.5 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (design time repository) +1 moreDue to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time...6.1 Medium
- sap netweaver developer studio, sap se netweaver developer studio (nwds) +1 moreSAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the...3.4 Low
- intel celeron 5305u firmware, celeron g3900 firmware, celeron g3900t firmware +404 more +406 moreImproper input validation for some Intel(R) Processors may allow an authenticated user to...5.5 Medium
- Show moreLoading…