CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- gentics cmsAn issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile...5.4 Medium
- gentics cmsAn issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an...8.8 High
- opendesign drawings sdkAn issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read...7.8 High
- opendesign drawings sdkAn issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read...7.8 High
- opendesign drawings sdkAn issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read...7.8 High
- poly g7500 firmware, studio x30 firmware, studio x50 firmware +1 more +3 moreAn issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field...8.8 High
- poly eagleeye director ii firmwareAn issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection...7.2 High
- poly eagleeye director ii firmwareAn issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file ...9.8 Critical
- dotcmsAn issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can...9.8 Critical
- reolink e1 zoom firmwareThe web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root...5.9 Medium
- pexip infinityPexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.7.5 High
- pexip infinityPexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption...7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via...7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.8.2 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session...7.5 High
- pexip infinityPexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single...5.9 Medium
- pexip infinityPexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.7.5 High
- pexip infinityPexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the...7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly...8.2 High
- pexip infinityPexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote...7.5 High
- pexip infinityPexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP.7.5 High
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Information disclosure5.3 Medium
- pexip infinityPexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a...5.3 Medium
- montala resourcespaceIn Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows...6.5 Medium
- pyenvpyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in...7.8 High
- ferdium, getferdi ferdi +1 moreA Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98...8.8 High
- unknown download monitorDownload Monitor < 4.5.91 - Admin+ Arbitrary File Download4.9 Medium
- tipsandtricks-hq accept stripe, unknown accept stripe payments +1 moreAccept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting4.8 Medium
- contact form 7 captcha project form 7 captcha, unknown contact form 7 captcha +1 moreContact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting6.1 Medium
- bracketspace simple post notesSimple Post Notes < 1.7.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- sigmaplugin advanced database cleanerAdvanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting6.1 Medium
- dwbooster loading page with loading screenLoading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting4.8 Medium
- codename065 download managerDownload Manager < 3.2.44 - Reflected Cross-Site Scripting6.1 Medium
- emarketdesign best contact management software, unknown best contact management software for wordpress +1 moreBest Contact Management Software <= 3.7.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown very simple breadcrumb, very simple breadcrumb project simple breadcrumb +1 moreVery Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- linkedin company updates project company updates, unknown linkedin company updates +1 moreLinkedIn Company Updates <= 1.5.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- import csv files project csv files, unknown import csv files +1 moreImport CSV Files <= 1.0 - Reflected Cross-Site Scripting6.1 Medium
- jquery validation for contact form 7 project validation for contact form 7, unknown jquery validation for contact form 7 +1 moreJquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF4.3 Medium
- miniorange oauth single sign on, cyberlord92 oauth single sign on – sso (oauth client) +1 moreOAuth Single Sign On < 6.22.6 - Authentication Bypass5.3 Medium
- tooltulips 404s404s < 3.5.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- supsystic data tables generator, supsysticcom data tables generator by supsystic +1 moreData Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown page generatorPage Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- automattic woocommerceWooCommerce < 6.6.0 - Admin+ Stored HTML Injection4.8 Medium
- flycart discount rules for woocommerceWoo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting6.1 Medium
- collect and deliver interface for woocommerce project and deliver interface for woocommerce, unknown cdi – collect and deliver interface for woocommerce +1 moreCDI < 5.1.9 - Reflected Cross-Site-Scripting6.1 Medium
- Show moreLoading…