CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- codename065 download managerDownload Manager <= 3.2.46 - Contributor+ Cross-Site Scripting6.4 Medium
- ghozylab image sliderImage Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication5.4 Medium
- wbcomdesigns buddypress group reviews, wbcom designs – buddypress group reviews +1 moreWbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass6.5 Medium
- livesupporti free live chat supportFree Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- checkpoint capsule workspaceA potential memory corruption issue was found in Capsule Workspace Android app (running on...7.5 High
- kentico xperienceIn Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the...7.5 High
- zte zxen cg200 firmwareZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP...5.3 Medium
- linux kernel, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreWhen sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory...6.7 Medium
- apache cloudstackApache CloudStack SAML Single Sign-On XXE9.8 Critical
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Authentication bypass5.9 Medium
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Directory listing5.7 Medium
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS API not secure6.3 Medium
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Authentication bypass admin password reset6.8 Medium
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Information disclosure hard coded credentials.5.7 Medium
- cellinx nvt - ip ptz camera, nvt - ip ptz camera firmware +1 moreCellinx NVT – IP PTZ Camera local file inclusion7.6 High
- cellinx nvt - ip ptz camera, nvt - ip ptz camera firmware +1 moreCellinx NVT – IP PTZ Camera Privilege Escalation8.2 High
- dsk dsknetAn issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the...5.4 Medium
- dsk dsknetAn issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability...7.1 High
- dsk dsknetAn issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection...8.2 High
- dsk dsknetAn issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control....5.3 Medium
- dsk dsknetAn issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow...8.8 High
- zohocorp manageengine firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +1 more +3 moreManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable...8.2 High
- anydeskAnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user...7.1 High
- apache skywalking nodejs agentService unavailability impact in NodeJS agent(version <= 0.5.0)7.5 High
- filezilla client, filezilla-project filezilla client +1 moreFileZilla Client Installer uninstall.exe unquoted search path6.3 Medium
- apache sparkApache Spark shell command injection vulnerability via Spark UI8.8 High
- fortinet fortinacAn empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below,…8.8 High
- dompdf dompdf/dompdf, dompdf project dompdf +1 moreExternal Control of File Name or Path in dompdf/dompdf5.3 Medium
- wpallimport wp all import, wp all import – drag & drop import for csv, xml, excel & google sheets +1 moreImport any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload7.2 High
- unit4 tetaUNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection...9.8 Critical
- qvis dvr firmware, nvr firmware +1 moreIn QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the...7.8 High
- showmypcShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the...7.3 High
- qvis dvr firmware, nvr firmware +1 moreQVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.9.8 Critical
- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer...9.8 Critical
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...5.5 Medium
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...5.5 Medium
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...5.5 Medium
- monitoringsoft softguard webSoftGuard Web (SGW) before 5.1.5 allows HTML injection.5.4 Medium
- reolink e1 zoom firmwareThe web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/...7.5 High
- nexans gigaswitch 641 desk v5 sfp-vi firmware, gigaswitch 642 desk v5 sfp-2vi firmware, gigaswitch v5 2tp\(pd-f\+\) sfp-vi 54vdc firmware +10 more +12 morelibnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor...9.8 Critical
- infiray iray-a8z3 firmwareAn issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET...9.8 Critical
- infiray iray-a8z3 firmwareAn issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject...9.8 Critical
- infiray iray-a8z3 firmwareAn issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer...9.8 Critical
- infiray iray-a8z3 firmwareAn issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can...8.8 High
- monitoringsoft softguard webThe export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an...6.5 Medium
- Show moreLoading…