CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- multi restaurant table reservation system project restaurant table reservation systemCross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation...5.4 Medium
- multi restaurant table reservation system project restaurant table reservation systemCross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation...5.4 Medium
- multi restaurant table reservation system project restaurant table reservation systemCross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation...5.4 Medium
- multi restaurant table reservation system project restaurant table reservation systemCross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation...5.4 Medium
- arox school erp proArox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via...6.1 Medium
- arox school erp proArox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities...8.8 High
crashSUSESecurity update for crashNo score- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...6.1 Medium
- octopus serverIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists...5.3 Medium
- eveo urve web manager, urve web manager +1 moreURVE Web Manager uploader.php unrestricted upload8.0 High
- eveo urve web manager, urve web manager +1 moreURVE Web Manager upload.php unrestricted upload8.0 High
- eveo urve web manager, urve web manager +1 moreURVE Web Manager img_upload.php unrestricted upload8.0 High
- redhat a-mq streams, build of quarkus, descision manager +6 more +8 morefabric8 kubernetes-client vulnerable6.7 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,...9.1 Critical
- phpHeap buffer overflow in finfo_buffer7.7 High
- hap-wi roxy-wiRoxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload10.0 Critical
- mealieThe login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by...5.3 Medium
- pbootcmsPbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f...7.2 High
- product show room site project show room siteProduct Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=.8.8 High
- softwarepublico i3geoPortal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site...6.1 Medium
- softwarepublico i3geoPortal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site...6.1 Medium
- softwarepublico i3geoPortal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site...6.1 Medium
- softwarepublico i3geoA local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software...9.8 Critical
- gtkradiant project gtkradiantGtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This...5.5 Medium
- isode swiftIsode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This...7.5 High
- autotrace project autotrace, fedoraproject fedora +1 moreAutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input...7.3 High
- gradleGradle's dependency verification can ignore checksum verification when signature verification cannot be performed6.6 Medium
- fast food ordering system project food ordering systemFast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS)...5.4 Medium
- amd athlon gold 3150u firmware, athlon silver 3050u firmware, athlon™ series +51 more +53 moreA malformed SMI (System Management Interface) command may allow an attacker to establish a...7.8 High
- amd athlon™ series, ryzen 3 3200u firmware, ryzen 3 3250u firmware +34 more +36 moreAn attacker with root account privileges can load any legitimately signed firmware image into the...4.4 Medium
- toybox project toyboxToybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c....7.5 High
- piwigoPiwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.7.5 High
- fastify bearer-auth, fastify-bearer-auth +1 morePotential Timing Attack Vector in @fastify/bearer-auth7.5 High
- ibm security verify governanceIBM Security Verify Identity Manager 10.0 contains sensitive information in the source code...3.0 Low
- ibm security verify governanceIBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that...5.1 Medium
- ibm security verify governanceIBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could...5.3 Medium
- ibm security verify governanceIBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious...3.8 Low
- mattermostGuest accounts can list all public channels4.3 Medium
- mattermostMalicious imports can lead to Denial of Service4.3 Medium
- mattermost, mattermost server +1 moreTeam members could access sensitive information of other users via an API call6.5 Medium
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain...3.7 Low
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is...5.4 Medium
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could...6.5 Medium
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could...4.3 Medium
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could...5.7 Medium
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does...4.3 Medium
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross...5.4 Medium
- Show moreLoading…