CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- 0xacab mat2, debian linux +1 moremat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.7.5 High
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper...5.4 Medium
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This...5.4 Medium
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could...5.4 Medium
fwupdSUSESecurity update for fwupdNo scoreoracleasmSUSESecurity update for oracleasmNo score- portswigger burp suiteA URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted...4.3 Medium
fwupdateopenSUSESecurity update for fwupdateNo score- hpe icewall sso certdSecurity vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL...9.8 Critical
- hpe flexfabric 5945 firmware, flexnetwork 5130 ei firmware +1 moreA potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric...4.8 Medium
- net-snmp, debian linux, fedoraproject fedora +2 morenet-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.6.5 Medium
- withknown knownKnown vulnerable to account takeover via host header injection attack in v1.3.18.8 High
- withknown knownKnown vulnerable to code execution via SVG file in v1.3.16.1 Medium
- withknown knownKnown v1.3.1 Cross-site Scripting5.4 Medium
- withknown knownKnown v1.3.1 contains Insecure Direct Object Reference4.3 Medium
- swtpm project swtpmIn swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary...7.1 High
resource-agentsSUSESecurity update for resource-agentsNo scoreresource-agentsSUSESecurity update for resource-agentsNo scoreresource-agentsSUSESecurity update for resource-agentsNo score- eclipse equinox p2, the eclipse foundation eclipse equinox p2 +1 moreIn Eclipse p2, installable units are able to alter the Eclipse Platform installation and the...10.0 Critical
libvpxOSS-FuzzIndex-out-of-bounds in decode_coefsNo score- hap-wi roxy-wiUnauthenticated Remote Code Execution in Roxy-WI10.0 Critical
- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- snipeitapp snipe-itSnipe-IT 6.0.2 vulnerable to Cross-site Scripting4.8 Medium
- dell cloud mobility for dell emc storage, cloud mobility for dell storage +1 moreCloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged...8.0 High
- dell cyber recovery, powerprotect cyber recovery +1 moreDell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation...7.8 High
- pi-hole adminlteAuthenticated XSS in Pi-hole AdminLTE5.9 Medium
- eclipse lyo, the eclipse foundation eclipse lyo +1 moreXML External Entity Reference in Eclipse Lyo5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreJetty SslConnection does not release pooled ByteBuffers in case of errors7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authority2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- gfi archiverFile upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure...9.8 Critical
- atoms183 cms project cmsSQL Injection vulnerability in product_admin.php in atoms183 CMS 1.0, allows attackers to execute...9.8 Critical
- magnolia-cms magnolia cmsMagnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- glftpdAn issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service...7.5 High
- jenkins google login, jenkins project google login plugin +1 moreJenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification6.5 Medium
- apache druidClickjacking in the web console4.3 Medium
- apache druidReflected XSS on certain HTTP endpoints6.1 Medium
- hyperledger fabricImproper Input Validation in fabric hyperledger7.5 High
- bookwyrm-social bookwyrmCross-site Scripting in BookWyrm6.3 Medium
- aceattorneyonline akashiMaliciously crafted evidence packet may cause denial of service6.5 Medium
- Show moreLoading…