CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- logstash-management-api project logstash-management-apiThe Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path...9.3 Critical
- windmill project windmillThe Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because...9.3 Critical
- python-recipe-database project python-recipe-databaseThe JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub...9.3 Critical
- mercury sample manager project sample managerThe HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal...9.3 Critical
- harveyzyh python project pythonThe Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal...9.3 Critical
- carceresbe project carceresbeThe Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the...9.3 Critical
- fan platform project platformThe Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path...9.3 Critical
- krypton project kryptonThe BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal...9.3 Critical
- flask-mvc project flask-mvcThe Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal...9.3 Critical
- equanimity project equanimityThe AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal...9.3 Critical
- simple-rat project simple-ratThe sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal...9.3 Critical
- iedadata usap-dc web submission and dataset searchThe iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal...9.3 Critical
- idayrus e-votingThe idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because...9.3 Critical
- ganga project gangaGanga allows absolute path traversal9.3 Critical
- cmu opendiamondSatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely9.3 Critical
- mercadoenlineaback project mercadoenlineabackThe cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path...9.3 Critical
- baiduwenkuspider flaskweb project flaskwebThe ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute...9.3 Critical
- orchestThe orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.9.3 Critical
- wormnest project wormnestThe operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal...9.3 Critical
- onyxforum project onyxforumThe ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.9.3 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreBrowse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreBrowsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a...8.1 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreExposure of sensitive information to an unauthorized actor issue in multiple applications of...6.5 Medium
- litecartCross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker...6.1 Medium
lz4OSS-FuzzUse-of-uninitialized-value in LZ4_compress_fast_extState_fastResetNo score- zimbra collaborationZimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created...9.8 Critical
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreUse after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a...8.8 High
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreType confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to...8.8 High
- google chrome, webrtc, apple ipados +9 more +11 moreHeap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker...8.8 High
- trilium project trilium, zadam zadam/trilium +1 moreCross-site Scripting (XSS) - Stored in zadam/trilium4.0 Medium
- joomlatools docmanExtension - Joomlatools - DOCman - Reflected Cross-Site Scripting (XSS) in an image upload function6.1 Medium
openscOSS-FuzzHeap-buffer-overflow in sc_pkcs15_allocate_object_contentNo scorelz4OSS-FuzzUse-of-uninitialized-value in LZ4HC_compress_generic_noDictCtxNo scoremrubyOSS-FuzzUNKNOWN WRITE in udivNo scorefluent-bitOSS-FuzzSegv on unknown address in onig_free_bodyNo scorequickjsOSS-FuzzHeap-buffer-overflow in emit_gotoNo scoremrubyOSS-FuzzUNKNOWN READ in mrb_bint_cmpNo scorelibpcapOSS-FuzzHeap-buffer-overflow in fixup_pcap_pkthdrNo scoremrubyOSS-FuzzHeap-use-after-free in mrb_bint_new_strNo scorelz4OSS-FuzzInvalid-free in round_trip_fuzzer.cNo score- microweber, microweber microweber/microweber +1 moreCross-Site Request Forgery (CSRF) in microweber/microweber6.3 Medium
- digitalguardian digital guardianDigital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a...5.1 Medium
- webswingWebswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is...9.8 Critical
- rpc.py project rpc.pyrpc.py vulnerable to Deserialization of Untrusted Data9.8 Critical
- ibm open liberty, websphere application server liberty, websphere application server +2 moreIBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are...5.0 Medium
- ibm security verify accessIBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a...6.3 Medium
- ibm security verify accessIBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than...5.9 Medium
- ibm security verify accessIBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to...5.4 Medium
- ibm security verify accessIBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site...5.4 Medium
- Show moreLoading…