CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- ibm partner engagement manager, sterling partner engagement manager, partner engagement manager on cloud\/saas +1 more +3 moreIBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML...7.1 High
- unit4 enterprise resource planningUnit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously.6.5 Medium
- grailsGrails framework Remote Code Execution via Data Binding9.8 Critical
- gnu sasl, debian linux +1 moreGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client3.8 Low
- sick safety designerA deserialization vulnerability in a .NET framework class used and not properly checked by Safety...7.8 High
- sick flexi soft designerA deserialization vulnerability in a .NET framework class used and not properly checked by Flexi...7.8 High
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may perform HTML injection.4.6 Medium
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may see sensitive information in clear text5.0 Medium
- zoho manageengine, zohocorp manageengine access manager plus, manageengine password manager pro +1 more +3 moreZoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to...9.8 Critical
- properties-reader project properties-readerPrototype Pollution7.3 High
- markdown-it-decorate project markdown-it-decorateCross-site Scripting (XSS)7.3 High
- sick ftmg firmwareUnauthenticated users can access sensitive web URLs through GET request, which should be...5.3 Medium
- hypr serverInsecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote...7.5 High
- hypr windows wfa, workforce access +1 moreThis issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability...4.5 Medium
- hypr serverForced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with...7.5 High
- gpac, gpac gpac/gpac +1 moreUse After Free in gpac/gpac7.8 High
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System editbrand.php sql injection6.3 Medium
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System login.php sql injection7.3 High
- octopus serverIn affected versions of Octopus Deploy, there is no logging of changes to artifacts within...5.3 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA directory traversal vulnerability caused by specific character sequences within an improperly...6.5 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W)...7.8 High
radare2OSS-FuzzHeap-buffer-overflow in get_symbols_64No scoreespeak-ngOSS-FuzzStack-buffer-overflow in LookupNo scoredlplibsOSS-FuzzContainer-overflow in STOFFStarMathToMMLConverterInternal::Parser::convertNo scorewasmtimeOSS-FuzzHeap-use-after-free in .tmpoLlNv4No scorewasmtimeOSS-FuzzHeap-use-after-free in wasmtime_runtime::externref::gc::hcbc8e23ae41614faNo score- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 High
- wavpack, fedoraproject fedora +1 moreA null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log:...5.5 Medium
- gpac, gpac gpac/gpac +1 moreInteger Overflow or Wraparound in gpac/gpac7.8 High
- pega infinity, pegasystems pega infinity +1 moreIf an on-premise installation of the Pega Platform is configured with the port for the JMX...9.8 Critical
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- riscv spike risc-v isa simulatorRISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception...5.5 Medium
- riscv spike risc-v isa simulatorThe component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5...5.5 Medium
- openhwgroup cva6, boom-core riscvc-boom +1 moreCVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit...5.5 Medium
- openhwgroup cva6The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered...5.5 Medium
- openhwgroup cva6CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as...5.5 Medium
- openhwgroup cva6CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when...5.5 Medium
- openhwgroup cva6CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit...5.5 Medium
- openhwgroup cva6The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when...9.8 Critical
- openhwgroup cva6CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted...5.5 Medium
- openhwgroup cva6CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted...5.5 Medium
- linuxfoundation rocket chip generatorRocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain...9.1 Critical
- htmldoc project htmldocHTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc...7.5 High
- htmldoc project htmldocHTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc...7.5 High
- f5 njsNginx NJS v0.7.5 was discovered to contain a segmentation violation in the function...7.5 High
- f5 njsNginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_value_to_number at...7.5 High
- f5 njsNginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_djb_hash at src...7.5 High
- f5 njsNginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h.9.1 Critical
- Show moreLoading…