CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- f5 njsNginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_utf8_next at src...7.5 High
- f5 njsNginx NJS v0.7.4 was discovered to contain a segmentation violation via njs_value_property at...7.5 High
- thenify project thenify, debian linux, fedoraproject fedora +2 moreArbitrary Code Execution8.6 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...2.5 Low
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label6.1 Medium
- gulpjs glob-parentglob-parent 6.0.0 vulnerable to Regular Expression Denial of Service7.5 High
- ibm powervm hypervisorAn attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a...7.6 High
- ibm engineering requirements quality assistant on-premisesIBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross...6.5 Medium
- ibm engineering requirements quality assistant on-premisesIBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an...6.5 Medium
- ibm engineering requirements quality assistant on-premisesIBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross...5.4 Medium
- ibm engineering requirements quality assistant on-premisesIBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross...5.4 Medium
- fortinet fortiedrA improper neutralization of input during web page generation ('cross-site scripting') in...5.4 Medium
- fortinet fortiadcMultiple improper neutralization of special elements used in an SQL Command ('SQL Injection')...5.4 Medium
- fortinet fortianalyzer, fortimanager, fortimanager , fortianalyzer +2 moreA privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4...6.7 Medium
- fortinet fortiosAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...4.7 Medium
- fortinet fortideceptorMultiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1...6.5 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper neutralization of special elements used in an os command ('os command injection') in...7.2 High
- fortinet forticlient, forticlientwindows +1 moreA relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and...7.8 High
- fortinet forticlient, forticlientwindows +1 moreAn execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0...7.7 High
- fortinet fortitokenandroid, fortinet fortitokenios, fortinet fortitokenwinapp, fortitoken mobile +1 moreA improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0...6.4 Medium
- fortinet fortiap-uA path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4...7.8 High
- fortinet fortiddosA use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5...8.1 High
- fortinet fortiauthenticator agent for microsoft outlook web access, fortiauthenticator outlookagent +1 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] in...6.1 Medium
- fortinet fortios, fortiproxy, fortiswitch +3 more +5 moreAn integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9...4.3 Medium
- fortinet fortios, fortiproxy, fortiproxy, fortios +2 moreA stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS...6.7 Medium
- ghozylab gallery for social photoGallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication5.4 Medium
- freemind wp browser project wp browser, kusbandono freemind wp browser +1 moreFreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- devrix dx share selectionDX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure5.3 Medium
- smartsoft button widget smartsoftButton Widget Smartsoft <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- slickremix feed them social, feed them social – social media feeds, video, and photo galleries +1 moreFeed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization9.8 Critical
- themeisle visualizer, visualizer: tables and charts manager for wordpress +1 moreVisualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization8.8 High
- anymind widget, mbeltwski anymind widget +1 moreAnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- Show moreLoading…