CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- sage 300In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300...7.8 High
oracleasmopenSUSESecurity update for oracleasmNo score- dingtian-tech dt-r004 firmwarerelay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to...5.9 Medium
- convert2rhel project convert2rhelIn convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the...5.5 Medium
- [unknown] pki-core, redhat certificate system, enterprise linux +2 moreA flaw was found in pki-core, which could allow a user to get a certificate for another user...5.7 Medium
- veeam management packA reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam...6.1 Medium
- nodejs node, node.js +1 moreNode.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows...7.3 High
- mi miuiA denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is...7.5 High
- f-secure atlant, all f-secure & withsecure endpoint protection products for windows and mac. f-secure linux security (32-bit). f-secure linux security (64-bit). f-secure atlant. withsecure cloud protection for salesforce & withsecure collaboration protection, cloud protection for salesforce +4 more +6 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- tp-link tl-wr841 firmware, tl-wr841n\(eu\) firmware, tl-wr841n firmware +2 moreA buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices...8.8 High
logrotateSUSESecurity update for logrotateNo score- fahou100 electronic mall systemElectronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.9.8 Critical
- verizon lvskihp indoorunit firmwareVerizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL...9.8 Critical
- verizon lvskihp outdoorunit firmwareOn Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade...7.5 High
- verizon lvskihp indoorunit firmware, lvskihp outdoorunit firmware +1 moreOn Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices,...7.5 High
- verizon lvskihp indoorunit firmware, lvskihp outdoorunit firmware +1 moreOn Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices,...7.5 High
- verizon lvskihp indoorunit firmwareVerizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled...9.8 Critical
- verizon lvskihp outdoorunit firmwareVerizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled...8.8 High
- verizon lvskihp outdoorunit firmwareVerizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled...9.8 Critical
- verizon lvskihp indoorunit firmware, lvskihp outdoorunit firmware +1 moreOn Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices,...7.5 High
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple e-Learning System claire_blake cross site scripting3.5 Low
- bestpractical request trackerBest Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.6.1 Medium
- bestpractical request tracker for incident responseBest Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via...9.1 Critical
- bestpractical request tracker for incident responseBest Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via...9.1 Critical
libsolvopenSUSE,libzyppopenSUSE,zypperopenSUSE +2 moreSecurity update for libsolv, libzypp, zypperNo scorelibsolvSUSE,libzyppSUSE,zypperSUSE +2 moreSecurity update for libsolv, libzypp, zypperNo score- logostore project logostoreLogoStore search.php sql injection6.3 Medium
qemuOSS-FuzzHeap-buffer-overflow in megasas_map_sglNo score- mplayerhq mplayerThe MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double...5.5 Medium
- nodejs node, node.js, siemens sinec ins +2 moreA cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0...5.3 Medium
- llhttp, nodejs node, node.js +4 more +6 moreThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Medium
- llhttp, nodejs node, node.js +2 more +4 morellhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 Medium
- llhttp, nodejs node, node.js +4 more +6 morellhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 Medium
- nodejs node, node.js, debian linux +2 more +4 moreA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 High
- kvf-admin project kvf-adminkvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because...9.8 Critical
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of...5.5 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...5.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause...5.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...5.9 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of...7.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could...7.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the...7.5 High
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog...5.1 Medium
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak...6.7 Medium
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...8.8 High
- schneider electric acti9 powertag link c, schneider-electric acti9 powertag link c \(a9xelc10-a\) firmware, acti9 powertag link c \(a9xelc10-b\) firmware +2 moreA CWE-269: Improper Privilege Management vulnerability exists that could allow elevated...6.8 Medium
- schneider electric spacelogic c-bus home controller, schneider-electric spacelogic c-bus home controller firmware +1 moreA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command...8.8 High
- jerryscriptJerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function...7.8 High
- flyte flyteadminInsufficient AccessToken Expiration Check in FlyteAdmin6.5 Medium
ca-certificatesUbuntuca-certificates updateNo score- Show moreLoading…