CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- tp-link tl-wr741n firmware, tl-wr742n firmware +1 moreAn infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415...7.5 High
- humhubCross site scripting in HumHub5.9 Medium
- online accreditation management system project accreditation management systemOnline Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- nesote inout homestayInout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests...7.5 High
- tenda ac10 firmwareTenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code...9.8 Critical
- icedtea icedtea-webIt was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML...7.5 High
- checkpoint endpoint security, harmony endpoint +1 moreCheck Point Endpoint Security Client E83 through E86 before E86.50 does not protect against a...2.3 Low
- broadcom advanced secure gateway, proxysg +1 moreSymantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync...9.1 Critical
- hex-rays idaA memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- codologic codoforumCodoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo...7.2 High
- imagely nextgen galleryIn nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow...8.8 High
- imagely nextgen galleryIn nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow...6.5 Medium
- openshift originInsecure cookies in Openshift Origin5.3 Medium
resource-agentsopenSUSESecurity update for resource-agentsNo scoreresource-agentsopenSUSESecurity update for resource-agentsNo score- control-webpanel webpanelCommand injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as...8.8 High
- control-webpanel webpanelThe password reset token in CWP v0.9.8.1126 is generated using known or predictable values.5.9 Medium
- control-webpanel webpanelA path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute...9.8 Critical
- devolutions serverIncorrect permission management in Devolutions Server before 2022.2 allows a new user with a...8.8 High
- eqs integrity lineEQS Integrity Line through 2022-07-01 allows a stored XSS via a crafted whistleblower entry.6.1 Medium
- appfire jira misc custom fieldsThe Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted...5.4 Medium
- getoutline outline, outline outline/outline +1 moreCross-site Scripting (XSS) - Stored in outline/outline7.3 High
fwupdopenSUSESecurity update for fwupdNo scorecrashSUSESecurity update for crashNo scorecrashSUSESecurity update for crashNo score- nocodb, nocodb nocodb/nocodb +1 moreServer-Side Request Forgery (SSRF) in nocodb/nocodb9.1 Critical
- wavlink wl-wn575a3 firmwareWavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection...9.8 Critical
- totolink ex300 v2 firmwareTOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via...9.8 Critical
- snipeitapp snipe-itSnipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings4.8 Medium
- dovecot, debian linux +1 moreAn issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two...8.8 High
- apple ipados, macos, tvos +2 more +4 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ipados, macos, iphone os +2 moreA logic issue in the handling of concurrent media was addressed with improved state handling....4.3 Medium
- cisco unified communications managerCisco Unified Communications Manager Arbitrary File Read Vulnerability4.3 Medium
- cisco unified communications manager, unity connection, unified communications manager im and presence service +2 moreCisco Unified Communications Products Access Control Vulnerability6.5 Medium
- cisco unified communications manager, unified communications manager im and presence service +1 moreCisco Unified Communications Products Cross-Site Scripting Vulnerability6.1 Medium
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0 Critical
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0 Critical
- cisco smart software manager on-premCisco Smart Software Manager On-Prem Denial of Service Vulnerability7.7 High
- cisco unity connection, unified communications manager, unified communications manager im and presence service +2 moreCisco Unified Communications Products Cross-Site Scripting Vulnerability6.1 Medium
- cisco unified communications manager, unified communications manager im and presence service +1 moreCisco Unified Communications Products Arbitrary File Read Vulnerability6.5 Medium
- cisco roomos software, telepresence collaboration endpoint +1 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability4.9 Medium
- cisco unified communications manager, unity connection +1 moreCisco Unified Communications Products Timing Attack Vulnerability5.3 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch could disclose sensitive database information to a local user in plain text.4.0 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to information disclosure which can be read by a local user.4.9 Medium
github.com/ipfs/go-ipfsGoDOS and excessive memory usage when passing untrusted user input to to dag importNo scoregithub.com/ipld/go-carGo,github.com/ipld/go-car/v2Go +1 moreMalformed CAR panics and excessive memory usageNo score- openvpn access serverOpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a...7.5 High
- red hat cloudforms, redhat cloudforms management engine +1 moreA insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL:...9.1 Critical
- custom content type manager project content type managercustom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary...7.2 High
- eidogoEidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input.5.4 Medium
- Show moreLoading…