CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- argoproj argo-cd, argo cd +1 moreInsecure entropy in argo-cd8.3 High
- discourse discourse-chatExposure of Sensitive Information in discourse-chat4.3 Medium
- guzzle, debian linux +1 moreCURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle7.7 High
- obdasystems mastroXML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system...7.5 High
- obdasystems mastroOBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack...7.5 High
- qlik senseThe GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.5.3 Medium
- ibm qradar wincollect agent, qradar wincollect +1 moreIBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive...5.3 Medium
grub2-commonTuxCare,grub2-efi-ia32TuxCare,grub2-efi-ia32-cdbootTuxCare +10 more +12 moreUpdate of grub2No score- devolutions remote desktop managerA path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2...7.5 High
shim-ia32TuxCare,shim-x64TuxCare +1 moreUpdate of shimNo score- nukevietCross-site Scripting in NukeViet CMS5.4 Medium
- quectel rg502q-ea firmwareThe Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.9.8 Critical
- abb rex640 pcl1, rex640 pcl2, rex640 pcl3 +3 more +5 moreABB Relion REX640 Insufficient file access control6.5 Medium
- redhat amq brokerA flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low...8.8 High
- red hat enterprise linuxA set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture...8.2 High
- atlasvpnAtlasVPN - Privilege Escalation5.9 Medium
- vmware spring cloud functionDenial of Service in Spring Cloud Function7.5 High
- autodesk navisworksA maliciously crafted PDF file may be used to dereference a pointer for read or write operation...7.8 High
- autodesk autocadA maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated...7.8 High
- autodesk autocadA maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free...7.8 High
- autodesk autocadA maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger...7.8 High
- autodesk autocad, design review, navisworks +11 more +13 moreAutodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior...7.8 High
- autodesk autocadA maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond...7.8 High
- tenable nessusAn authenticated attacker could read arbitrary files from the underlying operating system of the...6.5 Medium
- tenable nessusAn authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and...8.8 High
- comodo antivirusComodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate...7.8 High
- webkul krayinCross-site Scripting in krayin/laravel-crm6.1 Medium
grub2-commonTuxCare,grub2-efi-ia32TuxCare,grub2-efi-ia32-cdbootTuxCare +10 more +12 moreUpdate of grub2No scoreshim-ia32TuxCare,shim-x64TuxCare +1 moreUpdate of shimNo score- ideaco idealmsIdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/...6.1 Medium
- ispyconnect ispyiSpyConnect iSpy v7.2.2.0 is vulnerable to path traversal.9.8 Critical
- ispyconnect ispyiSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.9.8 Critical
- sr.solutions usertakeoverThe UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the...4.3 Medium
- hyland onbaseThe Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1...5.3 Medium
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- unioncms project unioncmsUnioncms v1.0.13 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...5.4 Medium
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- nuuo nvrsolo firmwareNUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site...6.1 Medium
- contec sv-cpt-mc310 firmwareAn arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0...9.8 Critical
- contec sv-cpt-mc310 firmwareSolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via...6.1 Medium
- f5 njsNginx NJS v0.7.2 was discovered to contain a segmentation violation in the function...5.5 Medium
- f5 njsNginx NJS v0.7.2 was discovered to contain a segmentation violation in the function...5.5 Medium
- f5 njsNginx NJS v0.7.2 was discovered to contain a segmentation violation in the function...5.5 Medium
- maccmsmaccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the...5.4 Medium
- maccmsmaccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the...5.4 Medium
- recipesRecipes - Stored XSS in Name Parameter3.5 Low
- recipesRecipes - Stored XSS in Clipboard3.5 Low
- recipesRecipes - Stored XSS in Add to Cart3.5 Low
- Show moreLoading…