CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4...7.2 High
- pescms teamAn issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import...6.5 Medium
- pescms teamAn issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to...6.5 Medium
- pescms teamAn issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and...6.5 Medium
- pescms teamA reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they...6.1 Medium
- tendacn ac23 ac2100 firmwareTenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.9.8 Critical
- tendacn ac23 ac2100 firmwareTenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of...9.8 Critical
- tendacn ac23 ac2100 firmwareTenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.9.8 Critical
- quic-go project quic-go** DISPUTED ** quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU...7.5 High
- northern.tech menderThe client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It...4.3 Medium
- dependencytrack frontend, zabbix +1 moreReflected XSS in graphs page of Zabbix Frontend3.7 Low
- dependencytrack frontend, zabbix +1 moreReflected XSS in discovery page of Zabbix Frontend3.7 Low
fwupdateSUSESecurity update for fwupdateNo score- jfrog artifactoryJFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request...3.1 Low
- apache jetspeed, portals jetspeed, apache software foundation portals +2 moreApache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues9.8 Critical
- jfrog artifactoryJFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure...4.9 Medium
- jfrog artifactoryJFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 Medium
- qnap systems inc. photo stationSession fixation vulnerability in access control management in Synology Photo Station before 6.8...8.1 High
ghostscriptOSS-FuzzMemcpy-param-overlap in FT_Stream_TryReadNo scoreghostscriptOSS-FuzzSegv on unknown address in gs_heap_free_objectNo scorefileOSS-FuzzHeap-buffer-overflow in json_parseNo score- apache commons configuration, debian linux, netapp snapcenter +2 moreApache Commons Configuration insecure interpolation defaults9.8 Critical
- moment, debian linux, fedoraproject fedora +2 moreInefficient Regular Expression Complexity in moment7.5 High
- hap-wi roxy-wiAuthentication Bypass in Roxy-wi10.0 Critical
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreThere are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of...5.5 Medium
- jquery-validation, jqueryvalidation jquery validation +1 morejquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-433067.5 High
pycaresPyPIImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares5.6 Medium- dice project diceAn arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code...9.8 Critical
- so filter shop by project filter shop bySo Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via...9.8 Critical
- ingredient stock management system project stock management systemIngredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- ingredient stock management system project stock management systemAn access control issue in Ingredient Stock Management System v1.0 allows attackers to take over...9.8 Critical
- newsletter module project moduleNewsletter Module v3.x was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- heroiclabs heroiclabs/nakama, nakama +1 moreImproper Restriction of Excessive Authentication Attempts in heroiclabs/nakama7.5 High
- ultrajson, fedoraproject fedora +1 moreIncorrect handling of invalid surrogate pair characters in ujson7.5 High
- phpgurukul zoo management systemA stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo...5.4 Medium
- ultrajson, fedoraproject fedora +1 moreDouble free of buffer during string decoding in ujson5.9 Medium
- nextcloud server, kiteworks security-advisories +1 moreSMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud Server5.4 Medium
- taogogo taocmsTaocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit...7.2 High
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration...4.9 Medium
- vicidialVICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.6.5 Medium
- vicidialVICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.5.5 Medium
- vicidialVICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.6.4 Medium
- vicidialVICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.5.5 Medium
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo score- candlepinproject candlepinThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 Medium
dpdkopenSUSESecurity update for dpdkNo scoredpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo score- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...7.1 High
- Show moreLoading…