CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- ninjateam wp duplicate pageWP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting4.8 Medium
- unknown woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting6.1 Medium
- cache images project images, unknown cache images +1 moreCache Images < 3.2.1 - Image Upload / Import via CSRF6.5 Medium
- bold-themes bold page builderBold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- maxfoundry wp-paginateWP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting4.8 Medium
- comment license project license, unknown comment license +1 moreComment License < 1.4.0 - Arbitrary Settings Update via CSRF4.3 Medium
- shortcut macros project macros, unknown shortcut macros +1 moreShortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings Update4.3 Medium
- syntacticsinc easync, unknown free booking plugin for hotels, restaurant and car rental – easync +1 moreeaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload9.8 Critical
- kitestudio core plugin for kitestudio themesCore Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scripting6.1 Medium
- awin data feed, unknown awin data feed +1 moreAwin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting5.4 Medium
- awin data feed, unknown awin data feed +1 moreAwin Data Feed < 1.8 - Reflected Cross-Site Scripting6.1 Medium
- averta shortcodes and extra features for phlox themeShortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting6.1 Medium
- sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 morePopup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting4.8 Medium
- pagebar project pagebarPagebar < 2.70 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- rename wp-login project wp-login, unknown rename wp-login.php +1 moreRename wp-login.php <= 2.6.0 - Secret URL Update via CSRF6.5 Medium
- sharebar project sharebarSharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF5.4 Medium
- admin management xtended project management xtended, unknown admin management xtended +1 moreAdmin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRF6.5 Medium
- unknown wp maintenance mode & coming soon, themeisle wp maintenance mode \& coming soon +1 moreWP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF6.5 Medium
- visser woocommerce - product importer, unknown woocommerce – product importer +1 moreWooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting6.1 Medium
- wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 moreWP Event Manager < 3.1.28 - Reflected Cross-Site Scripting6.1 Medium
- foxy-shop foxyshopFoxyShop < 4.8.2 - Reflected Cross-Site Scripting6.1 Medium
- unknown pricing deals for woocommercePricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi9.8 Critical
- couchbase serverAn issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in...5.3 Medium
- couchbase serverAn algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote...7.5 High
- live555Live555 through 1.08 does not handle socket connections properly. A huge number of incoming...7.5 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 moreCODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels7.5 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 moreCODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections7.5 High
- lenze c520 firmware, c550 firmware, c750 firmware +3 more +5 moreLENZE: Missing password verification in authorisation procedure9.8 Critical
- codesys opc da serverPlaintext Storage of a password in CODESYS V3 OPC DA Server5.5 Medium
crashopenSUSESecurity update for crashNo score- microweber, microweber microweber/microweber +1 moreAuthentication Bypass by Spoofing in microweber/microweber6.5 Medium
- h3c ssl vpnH3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.6.1 Medium
- qemu, debian linux +1 moresoftmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...8.8 High
- testplatform project testplatformThe zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal...9.3 Critical
- kg-fashion-chatbot project kg-fashion-chatbotThe yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path...9.3 Critical
- changepop-back project changepop-backThe unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute...9.3 Critical
- home internet project internetThe umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path...9.3 Critical
- s3label project s3labelThe stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal...9.3 Critical
- automatedquizeval project automatedquizevalThe sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute...9.3 Critical
- videoserver project videoserverThe shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal...9.3 Critical
- scorelab openmfThe scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because...9.3 Critical
- caretakerr-api project caretakerr-apiThe sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path...9.3 Critical
- iasset project iassetThe ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal...9.3 Critical
- bt lnmp project lnmpThe piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal...7.5 High
- audio aligner app project aligner appThe longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path...9.3 Critical
- shackerpanel project shackerpanelThe heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path...9.3 Critical
- livro python project pythonThe duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path...9.3 Critical
- realestate project realestateThe deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path...9.3 Critical
- chainer chainerrl-visualizerChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function9.3 Critical
- cockybook project cockybookThe ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal...9.3 Critical
- Show moreLoading…