CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
KernelLinuxx86/speculation/mmio: Add mitigation for Processor MMIO Stale DataNo score- glpi-project glpiSQL injection on login page in GLPI9.8 Critical
- glpi-project glpiSensitive Data Exposure on Refused Inventory Files in GLPI5.3 Medium
- hpe nonstop distributed systems management \/ software configuration managerA remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM...7.5 High
- cloudflare warpCloudlfare WARP Arbitrary File Overwrite5.8 Medium
- clever underscore.deepPrototype Pollution in underscore.deep8.3 High
- element-hq synapse, fedoraproject fedora +1 moreURL previews can crash Synapse media repositories or Synapse monoliths6.5 Medium
- xpdfreader xpdfXPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of...7.8 High
- ruby-mysql project ruby-mysqlRuby-MySQL Gem Client File Read6.5 Medium
- piwigopiwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.8.8 High
- packagekit, redhat enterprise linux +1 moreA flaw was found in PackageKit in the way some of the methods exposed by the Transaction...3.3 Low
- dompdf dompdf/dompdf, dompdf project dompdf +1 moreServer-Side Request Forgery (SSRF) in dompdf/dompdf3.7 Low
- douzone neorsDOUZONE BIZON NeoRS file download and execute vulnerability7.8 High
- dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 moreWhen an attacker uses a man-in-the-middle attack to sniff the request packets with success...7.4 High
- dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 moreIf the user enables the https function on the device, an attacker can modify the user’s request...4.7 Medium
- dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 moreWhen an attacker uses a man-in-the-middle attack to sniff the request packets with success...5.9 Medium
- dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 moreWhen an attacker obtaining the administrative account and password, or through a man-in-the...7.4 High
- shopex ecshopECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain...7.5 High
- mediawikiAn issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is...7.5 High
- admidioCross-site Scripting in admidio5.4 Medium
- gpacThe schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a...5.5 Medium
- yokogawa stardom fcj firmware, stardom fcn firmware, yokogawa electric corporation stardom controller +2 moreUse of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller...7.2 High
- yokogawa exaopc, yokogawa electric corporation cams for his, yokogawa b\/m9000 vp +5 more +7 moreViolation of secure design principles exists in the communication of CAMS for HIS. Affected...8.8 High
- yokogawa stardom fcj firmware, stardom fcn firmware, yokogawa electric corporation stardom controller +2 moreCleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller...7.5 High
- axiosys bento4In Bento4 1.6.0-638, there is a null pointer reference in the function...5.5 Medium
- offis dcmtkDCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for...7.5 High
- offis dcmtkDCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but...7.5 High
- offis dcmtkDCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all...7.5 High
- dcmtkDCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the...7.5 High
- ionicabizau ionicabizau/parse-path, parse-path project parse-path +1 moreAuthorization Bypass Through User-Controlled Key in ionicabizau/parse-path6.5 Medium
- netskope client, shadeyouvpn.com project shadeyouvpn.com +1 moreShadeYouVPN.com Client privileges management5.3 Medium
- khoros lithium forum, lithium forum +1 moreLithium Forum Compose Message server-side request forgery5.3 Medium
- simplessusSimplessus path traversal5.4 Medium
- simplessusSimplessus Cookie Time sql injection7.3 High
oracleasmSUSESecurity update for oracleasmNo score- No product listedheap buffer overflow in OpenSSL version 3.0.4No score
- glpi-project glpiSQL injection with _actor parameter in GLPI9.8 Critical
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim7.8 High
- gpacIn GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet...5.5 Medium
- gpacThe GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a...5.5 Medium
- gpacThe gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service...5.5 Medium
- gpacThe gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a...5.5 Medium
- joraniBenjamin BALET Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- joraniBenjamin BALET Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- joraniBenjamin BALET Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability...6.1 Medium
- lightcms project lightcmsA stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute...4.8 Medium
- haloHalo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template...9.8 Critical
- haloHalo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the...9.8 Critical
- unspecified kama click counter plugin, wp-kama kama click counter +1 moreKama Click Counter Plugin admin.php Blind sql injection6.3 Medium
- apache tikaIncomplete fix and new regex DoS in StandardsExtractingContentHandler3.3 Low
- Show moreLoading…