CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- secheron sepcos control and protection relay firmware package, sepcos control and protection relay firmware +1 moreSecheron SEPCOS Control and Protection Relay9.8 Critical
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-2906.8 Medium
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-12834.6 Medium
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-4246.8 Medium
- dominionvoting imagecast x, dominion voting system imagecast x application, imagecast x firmware +2 more2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-246.8 Medium
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.3 HIDDEN FUNCTIONALITY CWE-9126.8 Medium
- dominionvoting imagecast x, dominion voting system imagecast x application, imagecast x firmware +2 more2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-2506.8 Medium
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 moreThe authentication mechanism used by voters to activate a voting session on the tested version of...4.6 Medium
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-3476.8 Medium
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-2667.6 High
- offis dcmtkOFFIS DCMTK Path Traversal7.5 High
- offis dcmtkOFFIS DCMTK NULL Pointer Dereference7.5 High
- offis dcmtkOFFIS DCMTK Path Traversal7.5 High
- user photo project photoIn WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated...8.8 High
- opencartIn OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective...6.5 Medium
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 more3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-3197.4 High
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 more3.2.4 IMPROPER ACCESS CONTROL CWE-2849.1 Critical
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 more3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-2210.0 Critical
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 moreLRM does not restrict the types of files that can be uploaded to the affected product. A...10.0 Critical
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 more3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-25010.0 Critical
- broadcom symantec messaging gatewayA malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active...4.9 Medium
- hpe cray ex supercomputers firmware, cray sh supercomputer air cooled base system code firmware, cray sh supercomputer liquid cooled base system code firmware +2 more +4 moreA remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System...9.8 Critical
- sysaid okta sso, - okta sso integration +1 moreSysAid - Okta SSO integration5.9 Medium
- hpe control repository managerA potential security vulnerability has been identified in the installer of HPE Version Control...7.8 High
- concretecms concrete cmsTitle for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers...6.1 Medium
- concretecms concrete cmsCross site scripting in Concrete CMS6.1 Medium
- concretecms concrete cmsCode injection in concrete CMS9.8 Critical
- concretecms concrete cmsXSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the...6.1 Medium
- concretecms concrete cmsPath traversal in Concrete CMS9.1 Critical
- validate color project colorA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2...7.5 High
- gimpAn issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an...5.5 Medium
- schneider electric geo scada mobileA CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be...4.8 Medium
- melag ftp serverA user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid...5.3 Medium
- melag ftp serverWhen installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants...8.8 High
- melag ftp serverMELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP...6.5 Medium
- melag ftp serverWeak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read...7.1 High
- melag ftp serverThe authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows...7.5 High
- melag ftp serverMELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.5.5 Medium
drbdSUSESecurity update for drbdNo scoredrbdSUSESecurity update for drbdNo scoredrbdopenSUSESecurity update for drbdNo score- codesys plcwinnt, runtime toolkit +1 moreCODESYS runtime system prone to directory acces8.8 High
- codesys plcwinnt, runtime toolkit +1 moreCODESYS runtime system prone to denial of service due to use of out of range pointer8.1 High
- codesys plcwinnt, runtime toolkit +1 moreCODESYS runtime system prone to denial of service due to buffer over read6.5 Medium
- codesys plcwinnt, runtime toolkit +1 moreCODESYS runtime system prone to denial of service due to buffer copy6.5 Medium
- codesys plcwinnt, runtime toolkit +1 moreCODESYS runtime system prone to denial of service due to out of bounds read6.5 Medium
- codesys plcwinnt, runtime toolkit +1 moreCODESYS runtime system prone to denial of service due to Unexpected Sign Extension8.8 High
- codesys plcwinnt, runtime toolkit +1 moreCODESYS Runtime System prone to heap based buffer overflow8.8 High
- codesys plcwinnt, runtime toolkit +1 moreCodesys runtime systems: Access of uninitialised pointer lead to denial of service.6.5 Medium
- codesys plcwinnt, runtime toolkit 32 bit full, runtime toolkit +2 moreInsecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT9.8 Critical
- Show moreLoading…