CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- prestashopFile upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to...4.8 Medium
- google androidIn Car Settings app, the NotificationAccessConfirmationActivity is exported. In...7.5 High
- google androidIn wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a...7.8 High
- google androidIn PermissionController, there is a possible way to get and retain permissions without user's...7.8 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor...7.5 High
- kb messages php script project messages php script, unspecified kb messages php script +1 moreKB Messages PHP Script sql injection7.3 High
- kb login authentication script project login authentication script, unspecified kb login authentication script +1 moreKB Login Authentication Script sql injection7.3 High
- kb affiliate referral script project affiliate referral script, unspecified kb affiliate referral script +1 moreKB Affiliate Referral Script index.php sql injection7.3 High
- ibm iIBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
drupal/entity_printPackagistThis module enables you to generate print versions of content. Some installations of the module make use of the dompdf/dompdf third-party dependency. Security vulnerabilities exist for versions of dom…No score- rhonabwy project rhonabwyRhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component...7.5 High
- enhancesoft osticketA stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of...5.4 Medium
- wolfsshWolfSSH v1.4.7 was discovered to contain an integer overflow via the function...9.8 Critical
- ruoyiRuoYi 4.7.3 vulnerable to arbitrary file upload in background management module5.4 Medium
- ttpsc the schedulerThe Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project...5.4 Medium
- codecov codecov-pythonCommand Injection6.5 Medium
- patriksimek vm2Sandbox Bypass8.3 High
- apache tapestryRegular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)7.5 High
- sync oxygen xml webhelp, oxygen publishing engine, oxygen xml author +2 more +4 moreAn issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1...6.1 Medium
libjxlOSS-FuzzHeap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRowNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_bint_to_sNo scorefluent-bitOSS-FuzzHeap-use-after-free in jsmn_parseNo scoreskiaOSS-FuzzUNKNOWN WRITE in SkMaskBlurFilter::blurNo scorephpOSS-FuzzHeap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValueNo score- strapiStrapi 4.1.12 Cross-site Scripting via crafted file8.8 High
- spryker cloud commerceSpryker Commerce OS 1.4.2 allows Remote Command Execution.9.8 Critical
- bestpractical request trackerBest Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted...6.1 Medium
- mogublog project mogublogMogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- grid elements project elementsThe gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7...5.4 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Remote Code Execution Vulnerability7.2 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege Vulnerability7.2 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Remote Code Execution Vulnerability7.2 High
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability7.8 High
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability8.3 High
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft azure site recovery vmware to azureAzure Site Recovery Elevation of Privilege Vulnerability6.5 Medium
- Show moreLoading…