CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...7.1 High
- debian linux, linux kernel, xen +2 morenetwork backend may cause Linux netfront to use freed SKBs While adding logic to support XDP ...7.8 High
- debian linux, linux kernel +1 moreArm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using...4.7 Medium
- citeum openctiIn OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the...7.5 High
dpdkopenSUSE,dpdk-thunderxopenSUSE +1 moreSecurity update for dpdkNo score- citeum openctiA stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality...5.4 Medium
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo score- asus 4g-ac53u firmware, 4g-ac68u firmware, rog rapture gt-ac2900 firmware +90 more +92 moreASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin...9.0 Critical
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo score- lxml, lxml lxml/lxml, fedoraproject fedora +2 moreNULL Pointer Dereference in lxml/lxml5.3 Medium
- heroiclabs heroiclabs/nakama, nakama +1 moreInsufficient Session Expiration in heroiclabs/nakama8.2 High
libvpxOSS-FuzzCheck failed in CheckUnwindNo scoreperfettoOSS-FuzzHeap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptorNo score- mozilla firefoxMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 Critical
- mozilla firefoxAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 High
- mozilla firefoxAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 High
- mozilla firefoxWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 High
- mozilla firefoxThe MediaError message property should be consistent to avoid leaking information about cross...7.5 High
- mozilla firefoxASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 Critical
- mozilla firefoxSVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 Medium
- mozilla firefoxEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 Medium
- mozilla firefoxThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 Medium
- mozilla firefoxWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 Medium
- beegoPath Traversal in Beego9.8 Critical
- vim, vim vim/vim, debian linux +1 more +3 moreStack-based Buffer Overflow in vim/vim7.8 High
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytes5.3 Medium
- alibaba nacosUse of Hard-coded Credentials in Nacos8.8 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...7.8 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart)...7.5 High
apache2TuxCare,apache2-binTuxCare,apache2-dataTuxCare +5 more +7 moreFix CVE(s):No score- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high...6.4 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated...6.4 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly...6.7 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high...7.5 High
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated...8.2 High
- typeormSQL injection in typeORM9.8 Critical
- soflyy wp all import, unknown import any xml or csv file to wordpress +1 moreWP All Import < 3.6.8 - Admin+ Arbitrary File Upload7.2 High
- unknown wp championship, wp-championship project wp-championship +1 moreWP Championship < 9.3 - Multiple CSRF6.5 Medium
- wpdevart gallery, unknown gallery – image and video gallery with thumbnails +1 moreGallery < 2.0.0 - Reflected Cross-Site Scripting6.1 Medium
- unknown wp contact sliderWP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site Scripting4.8 Medium
- redirection-for-contact-form7 redirection for contact form 7Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting6.1 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import4.8 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting4.8 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber6.3 Medium
- chafa project chafa, hpjansson hpjansson/chafa +1 moreBuffer Over-read in hpjansson/chafa5.5 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote...6.5 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote...4.8 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a...8.1 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreBrowse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote...4.3 Medium
- Show moreLoading…