CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- phpgurukul zoo management systemSourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via...6.1 Medium
openscOSS-FuzzStack-buffer-overflow in sc_asn1_read_tagNo scoreespeak-ngOSS-FuzzStack-buffer-overflow in LookupThousandsNo score- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious website that could create a popup could have resized the popup to overlay the address...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- ublock origin project originCross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 High
io.spray:spray-json_2.10Maven,io.spray:spray-json_2.11Maven,io.spray:spray-json_2.11.0-RC4Maven +9 more +11 moreUncontrolled Resource Consumption in Spray JSONNo score- apache shiroAuthentication Bypass Vulnerability9.8 Critical
- silverstripe frameworkStored XSS via HTML fields in SilverStripe Framework5.4 Medium
- silverstripe assetsUnpublished, protected files can be published via shortcode4.3 Medium
- silverstripeHybridsessions does not expire session id on logout6.5 Medium
- silverstripeQuadratic blowup in Convert::xml2array()6.5 Medium
- wuzhicmsA reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute...6.1 Medium
- 1234n minicmsFile inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code...9.8 Critical
- marvalglobal marval msmMarval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker...9.8 Critical
- marvalglobal marval msmMarval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low...6.5 Medium
- marvalglobal marval msmMarval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low...8.8 High
- marvalglobal marval msmMarval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can...6.5 Medium
- marvalglobal marval msmMarval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of...9.8 Critical
KernelLinuxnetfilter: nf_tables: disallow non-stateful expression in sets earlierNo scoreKernelLinuxASoC: mediatek: Fix error handling in mt8173_max98090_dev_probeNo scoreKernelLinuxdrm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()No scoreKernelLinuxx86/delay: Fix the wrong asm constraint in delay_loop()No scoreKernelLinuxdm stats: add cond_resched when looping over entriesNo scoreKernelLinuxdm crypt: make printing of the key constant-timeNo scoreKernelLinuxx86/pm: Fix false positive kmemleak report in msr_build_context()No scoreKernelLinuxdrm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modesNo scoreKernelLinuxipw2x00: Fix potential NULL dereference in libipw_xmit()No scoreKernelLinuxNFC: NULL out the dev->rfkill to prevent UAFNo scoreKernelLinuxdrm/rockchip: vop: fix possible null-ptr-deref in vop_bind()No scoreKernelLinuxath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyixNo scoreKernelLinuxdrm/amd/pm: fix double free in si_parse_power_table()No scoreKernelLinuxALSA: jack: Access input_dev under mutexNo scoreKernelLinuxregulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dtNo scoreKernelLinuxdrm/msm/hdmi: check return value after calling platform_get_resource_byname()No scoreKernelLinuxASoC: mxs-saif: Fix refcount leak in mxs_saif_probeNo scoreKernelLinuxBluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeoutNo scoreKernelLinuxmedia: cx25821: Fix the warning when removing the moduleNo scoreKernelLinuxscsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()No scoreKernelLinuxmedia: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_initNo scoreKernelLinuxASoC: rt5645: Fix errorenous cleanup orderNo scoreKernelLinuxnvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tagsNo scoreKernelLinuxARM: versatile: Add missing of_node_put in dcscb_initNo scoreKernelLinuxfs: jfs: fix possible NULL pointer dereference in dbFree()No score- Show moreLoading…