CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
bbswitchopenSUSE,mhvtlopenSUSE,openafsopenSUSE +6 more +8 moreSecurity update for various openSUSE kernel module packagesNo score- naver whale browser, navercorp whale +1 moreNAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock...5.3 Medium
- softcreate l2blockerAuthentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and...8.1 High
- web2pyOpen redirect in web2py6.1 Medium
javaparserOSS-FuzzUncaught exception in com.github.javaparser.CommentsInserter.insertCommentsNo scoreserenityOSS-FuzzHeap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_forNo score- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 Medium
- debian linux, http\ \, libwww-perl http-daemon +2 moreInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon7.3 High
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Write in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- linux kernelrpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4...5.5 Medium
- linux kernelrpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.5.5 Medium
- galaxkeyPersistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to...5.4 Medium
c-blosc2OSS-FuzzUNKNOWN READ in zfp_getcellNo scoreyaraOSS-FuzzHeap-buffer-overflow in read_blob_signedNo scorelibcoapOSS-FuzzHeap-buffer-overflow in coap_split_uri_subNo score- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vim7.8 High
- raytion custom security managerRaytion 7.2.0 allows reflected Cross-site Scripting (XSS).6.1 Medium
- dbus-broker project dbus-brokerAn issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found...7.5 High
- dbus-broker project dbus-brokerAn issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the...7.5 High
clipboardcrates.ioclipboard is UnmaintainedNo score- zulipExpression Always True vulnerability in Zulip Server2.0 Low
- kubeedgeMalicious Message can crash CloudCore in KubeEdge4.2 Medium
- kjur jsrsasignImproper Verification of Cryptographic Signature7.7 High
github.com/cloudflare/cfrpkiGoPath traversal mitigation bypass in OctoRPKINo score- prestashop blockwishlistSQL Injection in prestashop/blockwishlist8.1 High
- kubeedgeMalicious response from KubeEdge can crash CSI Driver controller server4.0 Medium
- wire wire-webappCross Site Scripting in Wire Messages9.6 Critical
- espressif esp-idfEspressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption7.5 High
- apple ios, iphone os +1 moreApple iOS Siri Self privileges management6.3 Medium
- ruijienetworks rg-eg350 firmwareRG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection...9.1 Critical
ghostscriptOSS-FuzzHeap-use-after-free in psi_device_ref_finalizeNo score- underscore-99xp project underscore-99xpA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in underscore-99xp v1...7.5 High
- eyoucmsA stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute...4.8 Medium
- 1234n minicmsA Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local...8.1 High
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped()...5.5 Medium
- esa pyesasky** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution...9.8 Critical
- texercise project texerciseThe Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution...9.8 Critical
- rondolu-yt-concate project rondolu-yt-concateThe Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor...9.8 Critical
- zibal project zibalThe Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This...9.8 Critical
- catly translate project translateThe Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution...9.8 Critical
- toggleeThe Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor....9.8 Critical
- sixfab-tool project sixfab-toolThe Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via...9.8 Critical
- scoptrial project scoptrialThe Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor...9.8 Critical
- pypi watertoolsThe Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the...9.8 Critical
- pypi drxhelloThe drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the...9.8 Critical
- Show moreLoading…