CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- phoenix contact multiprog, proconos, proconos eclr +2 moreInsufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool9.8 Critical
- phoenix contact axc 1050, axc 1050 xc, axc 3050 +31 more +33 moreInsufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers9.8 Critical
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script reports.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script googleads.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script photo.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script featured.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script success_story.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script searchview.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script payment.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script newsletter1.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script cms.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script generalsettings.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script renewaldue.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script communitymanagement.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script countrymanagement.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script usermanagement.php privileges management6.3 Medium
- hindu matrimonial script project matrimonial script, unspecified hindu matrimonial script +1 moreHindu Matrimonial Script sql injection7.3 High
libvipsOSS-FuzzSegv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRoNo score- siemens cerberus dms, desigo cc, desigo cc compact +4 more +6 moreA vulnerability has been identified in SIMATIC WinCC OA V3.16 (All versions in default...9.8 Critical
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injection7.3 High
- parse-community parse-serverInvalid file request can crashe parse-server7.5 High
- adminer login project login, unspecified adminer login +1 moreAdminer Login access control5.3 Medium
- supsystic popup, popup plugin +1 moreSupsystic Popup Plugin cross-site request forgery4.3 Medium
@8x8/oxygen-constantsnpmWithdrawn Advisory: Malware in @8x8/oxygen-constantsNo score- polonel polonel/trudesk, trudesk project trudesk +1 moreUnrestricted Upload of File with Dangerous Type in polonel/trudesk9.6 Critical
- ibm robotic process automationIBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service...5.1 Medium
- ibm curam social program managementIBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout...5.9 Medium
- ibm curam social program managementIBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout...5.9 Medium
- maharaIn Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be...7.5 High
- nic knot resolverKnot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit...5.3 Medium
- fujitsu eternus cs8000 firmwareAn issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8...9.8 Critical
- fujitsu eternus cs8000 firmwareAn issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8...9.8 Critical
- suse manager server, manager server 4.1, manager server 4.2 +2 moreSUMA user enumeration via weak error message5.3 Medium
- suse manager server, manager server 4.1, manager server 4.2 +2 moreSUMA unauthenticated remote DoS via resource exhaustion7.5 High
- jerryscriptThere is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.07.8 High
- jerryscriptThere is a heap-use-after-free at ecma-helpers-string.c:1940 in...7.8 High
- unknown coming soon & maintenance mode by colorlib, colorlib coming soon \& maintenance mode +1 moreComing Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting4.8 Medium
- allow svg files project svg files, unknown allow svg files +1 moreAllow SVG Files < 1.1 - Admin+ Arbitrary File Upload7.2 High
- unknown wp zillow review sliderWP Zillow Review Slider < 2.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- e-dynamics events made easyEvents Made Easy < 2.2.81 - Unauthenticated SQLi9.8 Critical
- underconstruction project underconstructionunderConstruction < 1.21 - Admin+ Stored Cross-Site Scripting4.8 Medium
- underconstruction project underconstructionunderConstruction < 1.20 - Construction Mode Deactivation via CSRF4.3 Medium
- thenewsletterplugin newsletter, satollo newsletter – send awesome emails from wordpress +1 moreNewsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- capa protect project protect, unknown capa protect +1 moreCaPa Protect <= 0.5.8.2 - Arbitrary Settings Update via CSRF6.5 Medium
- unknown wpliteWPlite <= 1.3.1 - Arbitrary Settings Update via CSRF6.5 Medium
- amazon einzeltitellinks project einzeltitellinks, unknown amazon einzeltitellinks +1 moreAmazon Einzeltitellinks <= 1.3.3 - Arbitrary Settings Update to Stored XSS via CSRF6.5 Medium
- inline google maps project google maps, unknown inline google maps +1 moreInline Google Maps <= 5.11 - Arbitrary Settings Update to Stored XSS via CSRF6.5 Medium
- pdf24 articles to pdf project articles to pdf, unknown pdf24 articles to pdf +1 morePDF24 Articles To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF6.5 Medium
- unknown pdf24 article to pdf, pdf24 articles to pdf project articles to pdf +1 morePDF24 Article To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF6.5 Medium
- cross-linker project cross-linkerCross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF6.5 Medium
- Show moreLoading…