CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- vim, vim vim/vim, apple macos +2 more +4 moreBuffer Over-read in vim/vim7.8 High
bluezMageiaUpdated bluez packages fix security vulnerabilityNo score- got project gotGot allows a redirect to a UNIX socket5.3 Medium
- libjpeg-turboThe PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit...5.5 Medium
- debian linux, linux kernel +1 moredrivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service,...3.3 Low
- ffmpegFFmpeg rpza_decode_stream memory corruption7.3 High
- ffmpegFFmpeg utils.c ff_init_buffer_info memory corruption5.3 Medium
- ffmpegFFmpeg read_var_block_data memory corruption7.3 High
- ffmpegFFmpeg HEVC Video Decoder memory corruption5.3 Medium
- ffmpegFFmpeg msrle.c msrle_decode_frame memory corruption5.3 Medium
- ffmpegFFmpeg dxtroy.c integer coercion5.3 Medium
- ffmpegFFmpeg ansi.c decode_frame integer coercion5.3 Medium
- ffmpegFFmpeg h64.c decode_slice_header memory corruption5.3 Medium
- ffmpegFFmpeg snow.h add_yblock memory corruption5.3 Medium
- ffmpegFFmpeg oggparsevorbis.c vorbis_header memory corruption5.3 Medium
- ffmpegFFmpeg hevcpred_template.c intra_pred memory corruption5.3 Medium
- ffmpegFFmpeg h264.c output_frame memory corruption5.3 Medium
- ffmpegFFmpeg mpeg4videodec.c decode_vol_header memory corruption5.3 Medium
- ffmpegFFmpeg vmnc.c decode_hextile memory corruption5.3 Medium
- ffmpegFFmpeg jpeg2000dec.c get_siz memory corruption5.3 Medium
- ffmpegFFmpeg dnxhdenc.c dnxhd_init_rc memory corruption5.3 Medium
inventreePyPIXSS Vulnerability in Markdown EditorNo score- matomo integrationbrotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting6.1 Medium
- schema project schemabrotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS5.4 Medium
- oracle cloud infrastructureVulnerability in the Oracle Cloud Infrastructure product of Oracle Cloud Services. Easily...4.9 Medium
- querymen project querymenPrototype Pollution5.9 Medium
- libpq project libpq, pg-native project pg-native +1 moreDenial of Service (DoS)7.5 High
- fast string search project string searchOut-of-bounds Read5.3 Medium
- fast string search project string searchDenial of Service (DoS)7.5 High
- moutjs moutPrototype Pollution7.5 High
- discordjs opusDenial of Service (DoS)7.5 High
- asus rt-n53 firmwareASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of...9.8 Critical
- trendnet tv-ip110wn firmwareTrendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix...6.1 Medium
- trendnet tv-ip110wn firmwareTrendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname...6.1 Medium
- netgear wnap320 firmwarenetgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via ...5.3 Medium
- rescue dispatch management system project dispatch management systemRescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user...9.8 Critical
- parse-community parse-serverAuthentication bypass in Parse Server Apple Game Center auth adapter8.6 High
- blynk blynk-libraryA stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality...9.0 Critical
- anker eufy homebase 2, eufy homebase 2 firmware +1 moreA use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker...10.0 Critical
- atviseAn information disclosure vulnerability exists in the License registration functionality of...5.9 Medium
- proietti planet time enterpriseProietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is...9.8 Critical
- yuba u5cmsu5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default...6.1 Medium
- ibm robotic process automationIBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a...2.7 Low
- ibm spectrum protect server, spectrum protect operations center +1 moreIn some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0...5.9 Medium
- yuba u5cmsAn issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can...6.1 Medium
- antminer monitor project monitorA vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside...9.8 Critical
- electrumpaymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment...5.5 Medium
- online ordering system project ordering systemOnline Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via ...9.8 Critical
- online ordering system project ordering systemOnline Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via ...9.8 Critical
- online ordering system project ordering systemOnline Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via ...9.8 Critical
- Show moreLoading…