CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- multi-page toolkit project toolkit, unknown multi-page toolkit +1 moreMulti-page Toolkit <= 2.6 - Arbitrary Settings Update to Stored XSS via CSRF5.4 Medium
- unknown very simple contact form, very simple contact form project simple contact form +1 moreVery Simple Contact Form < 11.6 - Captcha bypass7.5 High
- unknown custom share buttons with floating sidebarCustom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSS4.8 Medium
- unknown wp-emailWP-Email < 2.69.0 - Log Deletion via CSRF6.5 Medium
- unknown wp-emailWP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing7.5 High
- seamless donations project donations, unknown seamless donations: a platform for global fundraising and rebuilding using stripe and paypal +1 moreSeamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF6.5 Medium
- richard leishman mail subscribe listMail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRF4.3 Medium
- codesolz better find and replaceBetter Find and Replace < 1.3.6 - Admin+ SQLi7.2 High
- unknown post grid, slider & carousel ultimate, wpwax post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS4.8 Medium
- print, pdf, & email by printfriendly pdf, email by printfriendly, unknown print, pdf, email by printfriendly, printfriendly print\, pdf\, email by printfriendly +2 morePrint, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- bestwebsoft rating, rating by bestwebsoft +1 moreRating by BestWebSoft < 1.6 - Rating Denial of Service6.5 Medium
- oceanwp ocean extraOcean Extra < 1.9.5 - Reflected Cross-Site Scripting6.1 Medium
- google xml sitemaps project xml sitemapsGoogle XML Sitemaps < 4.1.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mcafee consumer product removal tool, mcafee,llc mcafee consumer product removal tool +1 moreMcAfee MCPR privilege escalation7.9 High
- mcafee consumer product removal tool, mcafee,llc mcafee consumer product removal tool +1 moreMcAfee MCPR privilege escalation7.9 High
- cisco systems, inc. catalyst 2940 series switches, cisco ws-c2940-8tf-s firmware, ws-c2940-8tt-s firmware +2 more** Unsupported When Assigned ** Cisco Catalyst 2940 Series Switches provided by Cisco Systems,...6.1 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber6.5 Medium
- asus control centerASUS Control Center - SQL Injection8.8 High
- asus control centerASUS Control Center - Broken Access Control7.3 High
- realtek usb fe/1gbe/2.5gbe/5gbe nic family, rtl8152b firmware, rtl8153 firmware +5 more +7 moreRealtek USB FE/1GbE/2.5GbE/5GbE NIC Family - Buffer Overflow6.2 Medium
- nhi health insurance web service componentNHI’s health insurance web service component – Heap-based Buffer Overflow7.5 High
- elefant cms, elefantcms elefant cms +1 moreElefant CMS layout code injection6.3 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS File Upload drop privileges management6.3 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS cross-site request forgery5.0 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS extended Reflected cross site scriting4.3 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS Blog Post Persistent cross site scriting3.5 Low
- elefant cms, elefantcms elefant cms +1 moreElefant CMS Title Persistent cross site scriting3.5 Low
- elefant cms, elefantcms +1 moreElefant CMS Version Comparison Persistent cross site scriting4.3 Medium
- elefant cms, elefantcms elefant cms +1 moreElefant CMS Persistent cross site scriting4.3 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreIncorrect Use of Privileged APIs in polonel/trudesk10.0 Critical
libjxlOSS-FuzzHeap-buffer-overflow in jxl::BitsCoder::ReadNo scorevlcDebianvlc - security updateNo score- glpi-project glpi-inventory-plugin, glpi inventory +1 moreUnauthenticated Local File Inclusion5.3 Medium
- inventree inventree/inventree, inventree project inventree +1 moreAllocation of Resources Without Limits or Throttling in inventree/inventree7.1 High
- southrivertech titan ftp server nextgenAn issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. There is Remote Code...9.8 Critical
- southrivertech titan ftp server nextgenAn issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing,...7.8 High
- recipesRecipes - SSRF on Import6.5 Medium
- ffmpegFFmpeg decode_pulses memory corruption5.3 Medium
- ffmpegFFmpeg lag_decode_frame memory corruption7.3 High
- ffmpegFFmpeg Truemotion1 truemotion1_decode_header memory corruption5.3 Medium
- ffmpegFFmpeg Bitstream Buffer shorten_decode_frame memory corruption5.3 Medium
- ffmpegFFmpeg cmv_process_header memory corruption5.3 Medium
- ffmpegFFmpeg decode_update_thread_context memory corruption7.3 High
- ffmpegFFmpeg Slice Segment decode_nal_unit memory corruption5.3 Medium
- ffmpegFFmpeg decode_slice_header memory corruption5.3 Medium
radare2OSS-FuzzHeap-buffer-overflow in r_str_utf8_codepointNo score- libjxl project libjxllibjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline...6.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreOut-of-bounds Write in vim/vim7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Read in vim/vim7.8 High
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.8 High
- Show moreLoading…