CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- global content blocks project content blocks, unspecified global content blocks plugin +1 moreGlobal Content Blocks Plugin cross-site request forgery4.3 Medium
- gwolle guestbook project guestbook, unspecified gwolle guestbook plugin +1 moreGwolle Guestbook Plugin cross site scriting3.5 Low
- bytesforall atahualpa, unspecified atahualpa theme +1 moreAtahualpa Theme cross-site request forgery4.3 Medium
- unspecified alpine phototile for instagram plugin, thealpinepress alpine-photo-tile-for-instagram +1 moreAlpine PhotoTile for Instagram Plugin cross site scriting3.5 Low
- automattic vaultpress, unspecified vaultpress plugin +1 moreVaultPress Plugin code injection6.3 Medium
- bytesforall atahualpa, unspecified atahualpa theme +1 moreAtahualpa Theme cross site scriting3.5 Low
xstreamOSS-FuzzUncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpecNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in pdfi_dict_get_no_store_R_innerNo score- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreBuffer Over-read in vim/vim7.8 High
- nvidia nvflare, flare +1 moreUnsafe yaml deserialization in NVFlare9.8 Critical
- nvidia nvflare, flare +1 moreUnsafe deserialisation in the PKI implementation scheme of NVFlare9.8 Critical
- aiohttpWithdrawn: Denial of Service in aiohttp5.5 Medium
- diffy project diffyImproper handling of double quotes in file name in Diffy in Windows environment9.8 Critical
- sigb pmbPMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.6.1 Medium
- torproject torTor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter...7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter...7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter...7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter...7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at ...7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter...7.5 High
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- 74cms 74cmsse74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- flatpressA stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for...5.4 Medium
- pimcoreSQL injection in pimcore7.5 High
- infogamiOpenlibrary - Stored XSS3.5 Low
- shopwareAuthenticated Stored XSS in Shopware Administration6.5 Medium
- openlibraryOpenlibrary - Reflected XSS4.3 Medium
- docebo** UNSUPPORTED WHEN ASSIGNED ** Docebo Community Edition v4.0.5 and below was discovered to...9.8 Critical
- docebo** UNSUPPORTED WHEN ASSIGNED ** Docebo Community Edition v4.0.5 and below was discovered to...8.8 High
- directusdirectus - SSRF which leads to internal port scan5.0 Medium
- newtonsoft json.netImproper Handling of Exceptional Conditions in Newtonsoft.Json7.5 High
- totd project totdtotd before 1.5.3 does not properly randomize mesg IDs.6.5 Medium
- jenkins squash tm publisher, jenkins project squash tm publisher (squash4jenkins) plugin +1 moreSquash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text6.5 Medium
- jenkins vrealize orchestrator, jenkins project vrealize orchestrator plugin +1 moreMissing permission check in Jenkins vRealize Orchestrator Plugin5.7 Medium
- jenkins vrealize orchestrator, jenkins project vrealize orchestrator plugin +1 moreCross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin6.5 Medium
- jenkins threadfix, jenkins project threadfix plugin +1 moreMissing permission check in Jenkins ThreadFix Plugin6.5 Medium
- jenkins threadfix, jenkins project threadfix plugin +1 moreCross-Site Request Forgery in Jenkins ThreadFix Plugin6.5 Medium
- jenkins beaker builder, jenkins project beaker builder plugin +1 moreJenkins Beaker builder Plugin Missing Authorization vulnerability4.3 Medium
- jenkins beaker builder, jenkins project beaker builder plugin +1 moreCross-Site Request Forgery in Jenkins Beaker builder Plugin6.5 Medium
- jenkins jianliao notification, jenkins project jianliao notification plugin +1 moreJenkins Jianliao Notification Plugin Missing Authorization vulnerability4.3 Medium
- jenkins jianliao notification, jenkins project jianliao notification plugin +1 moreCross-Site Request Forgery in Jenkins Jianliao Notification Plugin6.5 Medium
- Show moreLoading…