CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows Network File System Remote Code Execution Vulnerability8.1 High
- libconnect project libconnectlibconnect Extension for Typo3 Vulnerable to XSS6.1 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows Network File System Information Disclosure Vulnerability5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Fax Service Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Internet Information Services Cachuri Module Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Fax Service Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Portable Device Enumerator Service Security Feature Bypass Vulnerability6.6 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Print Spooler Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability4.7 Medium
- argoproj argo cd, argo-cd +1 moreCross-site Scripting for Argo CD single sign on users2.6 Low
- argoproj argo cd, argo-cd +1 moreArgo CD's certificate verification is skipped for connections to OIDC providers8.3 High
- in2code living user experienceSQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"9.8 Critical
- ameos tarteaucitron project tarteaucitronCross site scripting in ameos_tarteaucitron5.4 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...7.5 High
- oliverklee oelibThe oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection.9.8 Critical
- oliverklee seminarsThe seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection.9.8 Critical
- vmware vrealize log insightVMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting...5.4 Medium
- vmware vrealize log insightVMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting...5.4 Medium
- pyramid solutions ethernet/ip adapter development kit (eadk), ethernet/ip adapter dll kit (eipa), ethernet/ip scanner development kit (edks) +5 more +7 morePyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write9.8 Critical
- linux kernelLinux kernel through 3.1 allows local users to obtain sensitive keystroke information via access...5.5 Medium
- git-for-windows gitGit for Windows' installer can be tricked into executing an untrusted binary8.2 High
- zulip, zulip server +1 moreZulip Server public data export contains attachments that are non-public4.9 Medium
- libguestfs, redhat enterprise linux +1 moreA vulnerability was found in libguestfs. This issue occurs while calculating the greatest...6.5 Medium
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...7.5 High
- sap enterprise portalSAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently...6.1 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreSAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the...8.8 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...6.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (wpc) +1 moreA vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently...6.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...6.1 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in...5.5 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (lcm) +1 moreSAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker...6.0 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not...6.1 Medium
- sap business oneDue to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker...7.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...6.1 Medium
- sap se s/4hana, sap s\/4hana +1 moreDue to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101,...5.3 Medium
- sap business oneSAP Business One client - version 10.0 allows an attacker with low privileges, to inject code...8.8 High
- sap businessobjects bw publisher service, sap se businessobjects (bw publisher service) +1 moreSAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an...7.8 High
- sap sapscore, sap se s/4hana, sap s\/4hana +2 moreWithin SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application...5.4 Medium
- sap business one license service apiDue to missing authentication check, SAP Business one License service API - version 10.0 allows...7.5 High
- sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420...6.5 Medium
- sap enterprise extension defense forces \& public security, sap se enterprise extension defense forces & public security (ea-dfps) +1 moreThe application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606,...4.3 Medium
- sap se business objects, sap business objects business intelligence platform +1 moreDue to insufficient input validation, SAP Business Objects - version 420, allows an authenticated...5.4 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence platform (visual difference application) +1 moreSAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420...4.6 Medium
- western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 moreCommand Injection Vulnerability on My Cloud Home6.8 Medium
- western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 moreProtecting AWS credentials stored in plaintext on My Cloud Home8.0 High
- octobercms octoberRace Condition in October CMS upload process8.1 High
- activerecord project activerecord, rails https://github.com/rails/rails +1 moreActive Record RCE bug with Serialized Columns9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack,...3.7 Low
- Show moreLoading…