CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- ge voluson s8, voluson s8 firmware +1 moreGE Voluson S8 Windows Operating System Patches privileges management8.8 High
- ge voluson s8, voluson s8 firmware +1 moreGE Voluson S8 Service Browser users.cgi improper authentication5.9 Medium
- ge voluson s8, voluson s8 firmware +1 moreGE Voluson S8 Service Browser hard-coded credentials5.9 Medium
- online discussion forum project discussion forumOnline Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via...9.8 Critical
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail...8.8 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin...7.2 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad...7.2 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print...8.8 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user...8.8 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser...7.2 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms...8.8 High
- zzcmsAn issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin...7.2 High
- rocketsoftware ags-zenaASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross...6.1 Medium
- rocketsoftware ags-zenaASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4...7.5 High
- rocketsoftware ags-zenaASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4...9.8 Critical
- mitel mivoice business, mivoice business express +1 moreA vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice...9.8 Critical
- grafana** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard...7.5 High
- rice open motion planning libraryMemory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior.7.5 High
- inventree inventree/inventree, inventree project inventree +1 moreCross-site Scripting (XSS) - Stored in inventree/inventree8.4 High
- inventree inventree/inventree, inventree project inventree +1 moreImproper Neutralization of Formula Elements in a CSV File in inventree/inventree9.0 Critical
- voipmonitorVoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file...9.8 Critical
- amazon hotpatchVersions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3...7.0 High
- checkmkA permission issue affects users that deployed the shipped version of the Checkmk Debian package....7.8 High
- bittorrent utorrentuTorrent Guest Account privileges management6.3 Medium
- bittorrent utorrentuTorrent PRNG improper authentication5.0 Medium
- bittorrent utorrentuTorrent memory corruption5.0 Medium
- unspecified utorrent, utorrent web +1 moreuTorrent JSON RPC Server privileges management6.3 Medium
- com.ritense.valtimo webuTorrent Web HTTP RPC Server privileges management6.3 Medium
tss-esapicrates.ioUse After Free in Context::start_auth_sessionNo scoreinventreePyPIFormula Injection in Exported DataNo score- inventree inventree/inventree, inventree project inventree +1 moreUnrestricted Upload of File with Dangerous Type in inventree/inventree9.0 Critical
inventreePyPIInsufficient HTML SanitizationNo scoreghostnpmGhost vulnerable to remote code execution in locale setting change6.6 Medium@backstage/plugin-techdocs-nodenpm,@backstage/techdocs-commonnpm +1 morePath traversal for local publishers in TechDocs backendNo score- argo events project eventsDirectory Traversal7.5 High
- nodejs undiciProxyAgent vulnerable to MITM6.5 Medium
tower-httpcrates.iotower-http's improper validation of Windows paths could lead to directory traversal attackNo scorespirv-toolsOSS-FuzzStack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstructNo scorefreeradiusOSS-FuzzHeap-buffer-overflow in fr_size_from_strNo scoreduckdbOSS-FuzzHeap-use-after-free in duckdb::Planner::CreatePlanNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in frame_get_vlmetalayersNo score- trendnet tew-831dr firmwareAn issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection...9.8 Critical
- trendnet tew-831dr firmwareAn issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password...6.5 Medium
- trendnet tew-831dr firmwareAn issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is...6.5 Medium
- trendnet tew-831dr firmwareAn issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key...5.4 Medium
- trendnet tew-831dr firmwareAn issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key...8.8 High
- jforumJForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http:/...8.8 High
- dlink dir-850l firmareAn issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is...7.5 High
- broadcom ca clarityCA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could...7.5 High
- broadcom ca automic automationCA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic...7.5 High
- Show moreLoading…