CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service...5.5 Medium
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer...9.8 Critical
- canonical cloud-init, ubuntu linux +1 moresensitive data exposure in cloud-init logs5.5 Medium
- edimax ic-3140w firmwareThe firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.9.8 Critical
- joyebike wolf 2022 firmwareJoy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote...6.8 Medium
- getgrav getgrav/grav, grav +1 moreCode Injection in getgrav/grav9.1 Critical
- enalean tuleapSQL injection via the field name of a tracker in Tuleap7.2 High
- enalean tuleapCross site scripting via the title of a document in Tuleap6.5 Medium
- enalean tuleapResources of private projects can be exposed in Tuleap4.3 Medium
drupal/config_termsPackagistThis module enables you to create and manage a version of taxonomy based on configuration entities instead of content. This allows the terms, vocabularies, and their structure to be exported, imported…No score- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online railway reservation system project railway reservation systemOnline Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
drupal/lottiefiles_fieldPackagistThe Lottiefiles Field module enables you to integrate the lottiefiles features into your page. The module does not sufficiently filter user-provided text on output, resulting in a Cross-Site Scripting…No score- devolutions serverTrueConf Server cross-site request forgery4.3 Medium
- devolutions serverTrueConf Server change-lang redirect3.5 Low
- devolutions serverTrueConf Server DOM cross site scripting3.5 Low
- devolutions serverTrueConf Server group DOM cross site scripting3.5 Low
- devolutions serverTrueConf Server Reflected cross site scripting3.5 Low
- devolutions serverTrueConf Server Reflected cross site scripting3.5 Low
- devolutions serverTrueConf Server Reflected cross site scripting3.5 Low
- devolutions serverTrueConf Server Stored cross site scripting3.5 Low
- ibm security guardiumIBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users...6.1 Medium
- microweber, microweber microweber/microweber +1 moreOpen Redirect in microweber/microweber4.3 Medium
- metamaskMetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because...5.9 Medium
- apifest oauth 2.0 serverApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and...6.1 Medium
- nomachineIncorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2...7.3 High
- orwell-dev-cpp project orwell-dev-cppA binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted ...7.8 High
- embarcadero dev-c\+\+A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a...7.8 High
- netsarang xlpdXLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users...7.8 High
- openhwgroup cva6CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the...7.5 High
- openhwgroup cva6CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.7.5 High
- thinkphpDeserialization of Untrusted Data in topthink/framework9.8 Critical
- textpatternTextpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session...4.3 Medium
- ivpn client, ivpn +1 moreIVPN Client privileges management7.8 High
- teleopti wfm, calabrio teleopti workforce management +1 moreTeleopti WFM Administration privileges management7.3 High
- teleopti wfm, calabrio teleopti workforce management +1 moreTeleopti WFM Administration Credentials information disclosure4.3 Medium
- teleopti wfm, calabrio teleopti workforce management +1 moreTeleopti WFM Administration GetOneTenant Credentials information disclosure4.3 Medium
- easy table project table, unspecified easy table plugin +1 moreEasy Table Plugin options-general.php cross site scripting3.5 Low
- nagios xiIn Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that...6.1 Medium
- nagios xiIn Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is...6.5 Medium
- nagios xiIn Nagios XI through 5.8.5, it is possible for a user without password verification to change his...4.3 Medium
- nagios xiIn Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to...6.5 Medium
- silverstripeStored XSS in link tags added via XHR in SilverStripe Framework5.4 Medium
- iliasIn ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page)...4.3 Medium
- Show moreLoading…