CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreAddress information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a...5.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreBrowse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a...4.3 Medium
- omron sysmac studio, na5-12w firmware, na5-15w firmware +55 more +57 moreUse of hard-coded credentials vulnerability exists in Machine automation controller NJ series all...8.1 High
- omron nj-pa3001 firmware, nj-pd3001 firmware, nj101-1000 firmware +50 more +52 moreAuthentication bypass by capture-replay vulnerability exists in Machine automation controller NX7...7.5 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreHOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of...8.8 High
- omron sysmac studio, na5-12w firmware, na5-15w firmware +55 more +57 moreAuthentication bypass by capture-replay vulnerability exists in Machine automation controller NJ...8.1 High
- yokogawa aw810d firmware, yokogawa electric corporation communication module for wide area communication router (for aw810d) vi461 +1 moreUse of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of...7.5 High
- djangoproject djangoDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 Critical
- triliumnotes trilium, zadam zadam/trilium +1 moreCross-site Scripting (XSS) - Reflected in zadam/trilium6.4 Medium
espeak-ngOSS-FuzzHeap-buffer-overflow in string_decoder_getc_utf_8No scorelibvpxOSS-FuzzHeap-buffer-overflow in init_mtNo score- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Write in vim/vim7.8 High
- md2roff project md2roff** DISPUTED ** md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a...9.8 Critical
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with...8.2 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions...6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x...6.1 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vim8.0 High
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vim7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreInteger Overflow or Wraparound in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from...7.5 High
- hongcms project hongcmsAn issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.7.2 High
- hongcms project hongcmsAn issue in the languages config file of HongCMS v3.0 allows attackers to getshell.7.2 High
- pdfalto project pdfaltoPDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src...9.8 Critical
- gnupg, debian linux, fedoraproject fedora +2 more +4 moreGnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information...6.5 Medium
- hospital management system project management systemHospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- hospital management system project management systemHospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- hospital management system project management systemHospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- college management system project management systemCollege Management System v1.0 was discovered to contain a remote code execution (RCE)...8.8 High
- tendacn ac23 ac2100 firmwareTenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter...8.8 High
- mingsoft mcmsUnrestricted Upload of File with Dangerous Type in MCMS9.8 Critical
- laravel passportSession Fixation4.8 Medium
- git-clone project git-cloneCommand Injection8.1 High
- scss-tokenizer project scss-tokenizerRegular Expression Denial of Service (ReDoS)5.3 Medium
- link-preview-js project link-preview-jsServer-side Request Forgery (SSRF)6.2 Medium
- mariadb, debian linux +1 moreMariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreMariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args...7.5 High
- mariadbMariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreMariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreMariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component...7.5 High
- Show moreLoading…