CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- advanced school management system project school management systemitsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school...7.2 High
- adobe media encoderAdobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution7.8 High
- advanced school management system project school management systemitsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school...7.2 High
- advanced school management system project school management systemitsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school...7.2 High
- adobe preludeAdobe Prelude Corruption could lead to Arbitrary code execution7.8 High
- advanced school management system project school management systemitsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school...7.2 High
- adobe lightroom, lightroom classic +1 moreAdobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability6.1 Medium
- advanced school management system project school management systemitsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via...7.2 High
- vanderbilt redcapA Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral...5.4 Medium
- vanderbilt redcapA Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger_ajax.php...5.4 Medium
- 1password, 1password connect, in the browser +3 more +5 moreAn issue was discovered in AgileBits 1Password, involving the method various 1Password apps and...4.8 Medium
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability9.8 Critical
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerability6.5 Medium
- cisco ata 187 analog telephone adapter firmware, ip phones with multiplatform firmware, unified ip phone 6911 firmware +9 more +11 moreCisco IP Phone Duplicate Key Vulnerability7.4 High
- cisco email security appliance (esa), email security appliance, secure email and web manager +2 moreCisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability9.8 Critical
- cisco appdynamics controller, appdynamics +1 moreCisco AppDynamics Controller Authorization Bypass Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Authentication Bypass Vulnerability5.3 Medium
- cisco email security appliance (esa), email security appliance, secure email and web manager +2 moreCisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability7.7 High
- axis communications ab os, axis m3005 firmware, m3007 firmware +4 more +6 moreA vulnerability, which was classified as critical, was found in AXIS P1204, P3225, P3367, M3045,...9.8 Critical
- adobe indesignAdobe InDesign crashes when parsing the GIF file7.8 High
bluezUbuntubluez vulnerabilitiesNo score- adobe indesignAdobe InDesign crashes when parsing the TIF file7.8 High
- adobe indesignAdobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 moreSplunk Enterprise deployment servers allow client publishing of forwarder bundles9.0 Critical
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 moreSplunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads7.5 High
- splunk, splunk universal forwarder, cloud platform +2 moreUniversal Forwarder management services allows remote login by default7.5 High
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 more +4 moreRisky commands warnings in Splunk Enterprise Dashboards6.8 Medium
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise lacked TLS host name validation8.1 High
- splunk, splunk cloud platform, enterprise +2 moreSplunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default8.1 High
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default7.4 High
- monstraMonstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload...9.8 Critical
- online tours and travels management system project tours and travels management systemOnline Tours And Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- web based quiz system project based quiz systemWeb Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid...8.8 High
- theme park ticketing system project park ticketing systemTheme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the...8.8 High
- youdiancmsYoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList...9.8 Critical
- youdiancmsYoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID...8.8 High
- youdiancmsYoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at...8.8 High
- kkcms project kkcmskkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at ...9.8 Critical
- devolutions remote desktop managerA lack of password masking in Devolutions Remote Desktop Manager allows physically proximate...4.6 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the...6.2 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is...5.3 Medium
- private messages project messages, rilwis private messages for wordpress (wordpress plugin) +1 morePrivate Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- phpcmsThere is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side.6.1 Medium
- private messages project messages, rilwis private messages for wordpress (wordpress plugin) +1 moreWordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- promotion slider project slider, micah wood promotion slider (wordpress plugin) +1 moreWordPress Promotion Slider plugin <= 3.3.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities5.4 Medium
- nextcode image slider by nextcode, image slider by nextcode – photo & video slider (wordpress plugin) +1 moreWordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- ayecode api key for google mapsWordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update5.4 Medium
- nextcode image slider by nextcode, image slider by nextcode – photo & video slider (wordpress plugin) +1 moreWordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability4.8 Medium
- peel shoppingPEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user...6.5 Medium
- nextcode image slider by nextcode, image slider by nextcode – photo & video slider (wordpress plugin) +1 moreWordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities5.4 Medium
- Show moreLoading…