CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function...7.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function...7.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function...7.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function...7.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function...7.8 High
- gnu libredwgThere is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int,...7.5 High
- protobuf-c project protobuf-c, fedoraproject fedora +1 moreProtobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function...5.5 Medium
- soliditylang solidityEthereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment()...5.5 Medium
- harfbuzz project harfbuzz, fedoraproject fedora +1 moreAn integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...5.5 Medium
- long range zip project range zipLrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions...5.5 Medium
- openidentityplatform openamNT auth module vulnerability in OpenAM5.3 Medium
- redisRedis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.7.5 High
- motor-admin, getmotoradmin motor admin +1 moremotoradmin - host header Injection in the reset password functionality6.8 Medium
- zalando skipperQuery predicate bypass in Zalando Skipper7.5 High
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber6.5 Medium
- habiticaHabitica - Open redirect in login page5.8 Medium
- habiticaHabitica - DOM XSS in login page4.3 Medium
drbdSUSESecurity update for drbdNo scoredrbdSUSESecurity update for drbdNo score- frappe erpnext, elated-themes frappe +1 moreERPNext - Improper user access conrol5.5 Medium
- frappe erpnext, elated-themes frappe +1 moreERPNext - Stored XSS in My Settings3.5 Low
- erpnextERPNext - Stored XSS leads to account takover3.5 Low
- frappe erpnext, elated-themes frappe +1 moreERPNext - Stored XSS in My Profile5.4 Medium
fwupdateSUSESecurity update for fwupdateNo scorefwupdateSUSESecurity update for fwupdateNo score- jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server KNX Group Address backdoor5.3 Medium
- jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server SSH Server backdoor5.3 Medium
- jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server backdoor5.5 Medium
libuclOSS-FuzzHeap-buffer-overflow in ucl_hash_searchNo score- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed...4.3 Medium
- google chromeUse after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to...8.8 High
- tinyexr project tinyexrIn tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.8.8 High
- jenkins project pipeline: input step plugin, jenkins pipeline\ +1 moreArbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin7.5 High
- jenkins junit, jenkins project junit plugin +1 moreCross-site Scripting in Jenkins JUnit Plugin5.4 Medium
- google chromeHeap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker...8.8 High
- saltstack saltSalt's PAM auth fails to reject locked accounts8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an...6.3 Medium
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreUse after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53...6.5 Medium
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreType confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to...8.8 High
- argoproj argo cd, argo-cd +1 moreArgo CD vulnerable to Uncontrolled Memory Consumption6.5 Medium
- guzzle, debian linux +1 moreChange in port should be considered a change in origin in Guzzle7.7 High
- nextauth.js next-authImproper Handling of `callbackUrl` parameter in next-auth7.5 High
- argoproj argo cd, argo-cd +1 moreSymlink following allows leaking out-of-bounds YAML files from Argo CD repo-server4.3 Medium
- argoproj argo-cd, argo cd +1 moreExternal URLs for Deployments can include javascript in argo-cd9.0 Critical
- Show moreLoading…