CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations6.5 Medium
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList...9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList...9.8 Critical
- dnnsoftware dotnetnukeDotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the...5.4 Medium
- goldshell miner firmwareThe debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed...7.5 High
- goldshell miner firmwareGoldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability...7.5 High
- goldshell miner firmwareGoldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 build parameter injection was possible5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in...4.1 Medium
- library management system project management system, owthub library management system +1 moreSourceCodester Library Management System index.php sql injection6.3 Medium
- library management system project management system, owthub library management system +1 moreSourceCodester Library Management System lab.php sql injection6.3 Medium
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple E-Learning System search.php sql injection6.3 Medium
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple E-Learning System classRoom.php sql injection6.3 Medium
- wavlink wn535k2, wn535k3, wl-wn535k2 firmware +1 more +3 moreWAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection8.0 High
- wavlink wn535k2, wn535k3, wl-wn535k2 firmware +1 more +3 moreWAVLINK WN535K2/WN535K3 nightled.cgi os command injection8.0 High
- wavlink wn535k2, wn535k3, wl-wn535k2 firmware +1 more +3 moreWAVLINK WN535K2/WN535K3 os command injection8.0 High
- opensuse tumbleweedkeylime %post scriplet allows for privilege escalation from keylime user to root7.1 High
- yokogawa rental & lease corporation passage drive, yrl passage drive for box +1 morePassage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an...7.8 High
- denx u-bootsquashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains...7.8 High
- hinet hicos’ client-side citizen digital certificate, hicos natural person credential component client +1 moreHiCOS’ client-side citizen digital certificate - Double Free6.8 Medium
- hinet hicos’ client-side citizen digital certificate, hicos natural person credential component client +1 moreHiCOS’ client-side citizen digital certificate - Stack Buffer Overflow6.8 Medium
- hinet hicos’ client-side citizen digital certificate, hicos natural person credential component client +1 moreHiCOS’ client-side citizen digital certificate - Stack Buffer Overflow6.8 Medium
- hinet hicos’ client-side citizen digital certificate, hicos natural person credential component client +1 moreHiCOS’ client-side citizen digital certificate - Stack Buffer Overflow6.8 Medium
- teamplus team\+ pro, teamplus technology inc. pro (private cloud) +1 moreTEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling7.7 High
- data systems consulting co., ltd. bpm, digiwin business process management +1 moreData Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection7.5 High
- data systems consulting co., ltd. bpm, digiwin business process management +1 moreData Systems Consulting Co., Ltd. BPM - Blind Server-Side Request Forgery (SSRF)5.3 Medium
- data systems consulting co., ltd. bpm, digiwin business process management +1 moreData Systems Consulting Co., Ltd. BPM - SQL Injection9.8 Critical
net.bull.javamelody:javamelody-coreMavenJava Melody vulnerable to cross-site scripting10.0 Critical- slack morphism project morphism, abdolence slack-morphism-rust +1 moreSlack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logs7.5 High
openscOSS-FuzzStack-buffer-overflow in sc_asn1_read_tagNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_vm_execNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_bint_xorNo scoremrubyOSS-FuzzSegv on unknown address in mrb_bint_to_sNo scoremrubyOSS-FuzzUse-of-uninitialized-value in mrb_bint_as_intNo score- libtirpc project libtirpc, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process...7.5 High
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...6.4 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...6.7 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...6.4 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...6.4 Medium
- Show moreLoading…