CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- trendnet tew-751dr firmware, tew-752dru firmware +1 moreTRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack...8.8 High
- dlink dir-645 firmwareD-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the...9.8 Critical
- discourseInvites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse5.7 Medium
- scratchstatus scratchtoolsCross site scripting vulnerability in ScratchTools7.1 High
- deltaww diaenergieA cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta...6.1 Medium
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreMissing Encryption of Sensitive Data in ldap-account-manager5.5 Medium
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreUnauthenticated Remote Code Execution in ldap-account-manager9.0 Critical
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreIncorrect Regular Expressions in ldap-account-manager6.6 Medium
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreIncorrect Default Permissions in ldap-account-manager7.8 High
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreUnauthenticated LDAP Injection in ldap-account-manager6.5 Medium
- openeclassAn issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka...6.5 Medium
- glpi-project glpi-inventory-plugin, glpi inventory +1 moreSQL Injection via package deployment tasks in glpi-inventory-plugin5.8 Medium
- gpacIn GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args...5.5 Medium
- bigbluebuttonCross site scripting in username that will trigger by sending chat6.5 Medium
- bigbluebuttonCross site scripting vulnerability for private chat in bigbluebutton6.5 Medium
- bigbluebutton greenlightImproper privilege management - Anyone can view room settings in GreenLight4.3 Medium
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce 3640 firmware +1 moreA potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server...7.5 High
- devolutions remote desktop managerInformation Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager...6.5 Medium
- unspecified admin custom login plugin, weblizar admin custom login +1 moreAdmin Custom Login Plugin Persistent cross site scripting3.5 Low
- analytics stats counter statistics project stats counter statistics, unspecified analytics stats counter statistics plugin +1 moreAnalytics Stats Counter Statistics Plugin code injection7.3 High
- broadcom sannavIn Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server...7.5 High
- broadcom sannavBrocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade...6.5 Medium
- broadcom sannavIn Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the...7.5 High
- hikvision ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d, ds-a71024/48r-cvs,ds-a72024/48r-cvs, ds-a71024 firmware +10 more +12 moreThe web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security...6.5 Medium
- hikvision ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d, ds-a71024/48r-cvs,ds-a72024/48r-cvs, ds-a71024 firmware +10 more +12 moreThe web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security...7.5 High
- axiosys bento4In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array...7.5 High
- apache systemdsDenial of service in readExternal method7.5 High
- mindsporeWhen performing the initialization operation of the Split operator, if a dimension in the input...7.5 High
- mindsporeWhen performing the derivation shape operation of the SpaceToBatch operator, if there is a value...7.5 High
- mindsporeWhen performing the inference shape operation of the SparseToDense operator, if the number of...7.5 High
- mindsporeWhen performing the analytical operation of the DepthwiseConv2D operator, if the attribute...7.5 High
- mindsporeWhen the Reduce operator run operation is executed, if there is a value of 0 in the parameter...7.5 High
- mindsporeWhen performing the inference shape operation of the Transpose operator, if the value in the perm...7.5 High
- mindsporeWhen performing the inference shape operation of the Tile operator, if the input data type is not...7.5 High
- mindsporeWhen performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax,...7.5 High
- elcomplus smarticsElcomplus SmartICS Path Traversal3.8 Low
- elcomplus smarticsElcomplus SmartICS Cross-site Scripting8.8 High
- elcomplus smarticsElcomplus SmartICS Access Control6.8 Medium
- ruckuswireless zonedirector firmwareCross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.6.1 Medium
- album lock project lock, unspecified album lock +1 moreAlbum Lock getImage path traversal4.4 Medium
- projectsendProjectSend information disclosure3.5 Low
- air transfer project transfer, unspecified air transfer +1 moreAir Transfer cross site scripting3.5 Low
drbdSUSESecurity update for drbdNo scoredrbdSUSESecurity update for drbdNo score- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 moreServer-Side Request Forgery (SSRF) in ionicabizau/parse-url9.4 Critical
- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 moreCross-site Scripting (XSS) - Stored in ionicabizau/parse-url9.1 Critical
- bytecodealliance cranelift-codegen, wasmtime +1 moreMiscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime4.8 Medium
- scniro-validator project scniro-validatorA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator...7.5 High
- regexfn project regexfnA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5...7.5 High
- repo-git-downloader project repo-git-downloaderA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git...7.5 High
- Show moreLoading…