CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- insights from google pagespeed project from google pagespeed, unknown insights from google pagespeed +1 moreInsights from Google PageSpeed < 4.0.7 - Multiple CSRF8.8 High
- wpusermanager wp user manager, unknown wp user manager – user profile builder & membership +1 moreWP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise7.5 High
- grunt-util-property project grunt-util-propertyPrototype Pollution4.0 Medium
- devolutions server, filezilla-project filezilla server +1 moreFileZilla Server PORT confused deputy4.3 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreIn LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not...7.5 High
- go standard library net/http, golang go +1 moreExposure of client IP addresses in net/http6.5 Medium
- go standard library encoding/gob, golang go +1 moreStack exhaustion when decoding certain messages in encoding/gob7.5 High
- go standard library encoding/xml, golang go +1 moreStack exhaustion when unmarshaling certain documents in encoding/xml7.5 High
- go standard library path/filepath, golang go +1 moreStack exhaustion on crafted paths in path/filepath7.5 High
- go standard library compress/gzip, golang go +1 moreStack exhaustion when reading certain archives in compress/gzip7.5 High
- go standard library io/fs, golang go +1 moreStack exhaustion in Glob on certain paths in io/fs7.5 High
- go standard library encoding/xml, golang go, fedoraproject fedora +1 more +3 moreStack exhaustion from deeply nested XML documents in encoding/xml7.5 High
- go standard library go/parser, golang go +1 moreStack exhaustion due to deeply nested types in go/parser5.5 Medium
- go standard library net/http, golang go +1 moreImproper sanitization of Transfer-Encoding headers in net/http6.5 Medium
- inductiveautomation ignitionAn issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The...7.2 High
- octobotOctobot mishandles Tentacles upload9.8 Critical
- apache hiveApache Hive Security vulnerability in Hive with UDFs7.5 High
- itech auction scriptItech Auction Script mcategory.php Blind sql injection6.3 Medium
- itech b2b scriptItech B2B Script catcompany.php sql injection6.3 Medium
- itech classifieds scriptItech Classifieds Script subpage.php sql injection6.3 Medium
- itech dating scriptItech Dating Script see_more_details.php sql injection6.3 Medium
- itech freelancer scriptItech Freelancer Script category.php sql injection6.3 Medium
- itech job portal scriptItech Job Portal Script admin improper authentication7.3 High
- itech multi vendor scriptItech Multi Vendor Script product-list.php sql injection6.3 Medium
- itech news portal, itechscripts news portal script +1 moreItech News Portal information.php sql injection6.3 Medium
- itech real estate scriptItech Real Estate Script search_property.php sql injection6.3 Medium
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
- bentley microstation, view +1 moreAn issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0...3.3 Low
github.com/cilium/ciliumGoCilium host policy bypass in endpoint-routes mode with dual-stack3.3 Low- ericcornelissen shescapeInsufficient escaping of whitespace in shescape9.8 Critical
- ericcornelissen shescapeInsufficient escaping of line feeds for CMD in shescape8.1 High
wintercms/winterPackagistBypass of CMS Safe Mode Security FeatureNo score- red hat undertow, netapp cloud secure agent, oncommand insight +3 more +5 moreUndertow vulnerable to Denial of Service (DoS) attacks7.5 High
- red hat undertow, redhat fuse, integration camel k +4 more +6 moreUndertow vulnerable to memory exhaustion due to buffer leak7.5 High
- togglzTogglz console missing cross-site request forgery (CSRF) protection8.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...7.3 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- inductiveautomation ignitionAn issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17....9.8 Critical
- opener project openerEIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports...7.8 High
- containrrr shoutrrrDenial of Service (DoS)7.5 High
- terserRegular Expression Denial of Service (ReDoS)5.3 Medium
oro/commercePackagistOroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor6.9 Medium- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- Show moreLoading…