CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- apple swift, swift project corelib-foundation +1 moreSwift-corelibs-foundation denial of service in JSON decoding with JSONDecoder7.5 High
- phpgurukul directory management systemDirectory Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- synaptics fingerprint driversynaTEE.signed.dll Out-Of-Bounds Heap Write5.5 Medium
- vmware hcxVMware HCX update addresses an information disclosure vulnerability. A malicious actor with...6.5 Medium
- autodesk 3ds maxA maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the...7.8 High
- autodesk 3ds maxA maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds...7.8 High
- phpgurukul zoo management systemZoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html...5.4 Medium
- razormist online discussion forum siteOnline Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes...4.8 Medium
- online tutor portal site project tutor portal siteOnline Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f...7.2 High
- razormist online discussion forum siteOnline Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f...7.2 High
- online tutor portal site project tutor portal siteOnline Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes...4.8 Medium
- mercurycom mipc451-4 firmwareMERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code...8.8 High
- mi xiaomi lamp 1 firmwareXiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows...8.8 High
- student registration and fee payment system project registration and fee payment systemStudent Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student...7.2 High
- online fire reporting system project fire reporting systemOnline Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes...4.8 Medium
- tenda hg9 firmwareTenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping...8.8 High
- angtech harajA cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers...5.4 Medium
- wiris mathtypeWiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the...7.5 High
- intechnosoftware user login log, weblizar user login log plugin +1 moreweblizar User Login Log Plugin Stored cross site scriting3.5 Low
- bestwebsoft contact form plugin, contact form +1 moreBestWebSoft Contact Form Plugin Stored cross site scriting3.5 Low
- xyzscripts contact form manager plugin, contact form manager +1 moreXYZScripts Contact Form Manager Plugin cross site scriting3.5 Low
- xyzscripts contact form manager plugin, contact form manager +1 moreXYZScripts Contact Form Manager Plugin cross-site request forgery4.3 Medium
- wuzhicmsSQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute...9.8 Critical
- redhat droolsXML External Entity Reference in drools9.8 Critical
- kromit titra, kromitgmbh kromitgmbh/titra +1 moreWeak Password Requirements in kromitgmbh/titra7.1 High
- flatcore flatcore-cmsflatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user...8.8 High
- gpac mp4boxIn GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to...5.5 Medium
- pythonPython pgAdmin4 uncontrolled search path5.0 Medium
- fujielectric v-server, fuji electric co., ltd. / hakko electronics co., ltd. v-server and v-server lite +1 moreOut-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0...7.8 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreOut-of-bounds read vulnerability exists in the simulator module contained in the graphic editor ...7.8 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreOut-of-bounds write vulnerability exists in the simulator module contained in the graphic editor ...7.8 High
- webnus modern events calendar liteCross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows...5.4 Medium
duckdbOSS-FuzzSegv on unknown address in duckdb::ExpressionBinder::BindExpressionNo score- imagemagick, fedoraproject fedora, redhat enterprise linux +2 moreIn ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte...7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick, causing an outside the range of representable values of...7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick, causing an outside the range of representable values of...7.8 High
- debian linux, genivi diagnostic log and trace +1 moreAn issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double...7.5 High
- red hat bootloader team shimThere's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables6.5 Medium
- artifex ghostscript, fedoraproject fedora +1 moreA NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to...5.5 Medium
- microsoft av1 video extensionAV1 Video Extension Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +1 more +3 moreWindows Autopilot Device Management and Enrollment Client Spoofing Vulnerability6.5 Medium
- microsoft hevc video extension, hevc video extensions +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft azure rtos guix studio, azure real time operating system guix studio +1 moreAzure RTOS GUIX Studio Information Disclosure Vulnerability7.8 High
- microsoft azure rtos guix studio, azure real time operating system guix studio +1 moreAzure RTOS GUIX Studio Remote Code Execution Vulnerability7.8 High
- microsoft azure real time operating system, azure real time operating system guix studio +1 moreAzure RTOS GUIX Studio Remote Code Execution Vulnerability7.8 High
- microsoft azure rtos guix studio, azure real time operating system guix studio +1 moreAzure RTOS GUIX Studio Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +1 more +3 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft excel, excel 2013 service pack 1, excel 2016 +2 more +4 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office online server, office web apps server 2013 service pack 1, sharepoint enterprise server 2013 service pack 1 +5 more +7 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft office online server, office web apps server 2013 service pack 1, sharepoint enterprise server 2013 service pack 1 +5 more +7 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…