CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- rk max smart tv box project max smart tv box firmware, v88 smart tv box project smart tv box firmware +1 moreAn issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause...7.5 High
- h96tvbox h96 pro plus firmwareAn issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via...7.5 High
- thingsforrestaurants quick restaurant reservations (wordpress plugin), quick restaurant reservations +1 moreWordPress Quick Restaurant Reservations plugin <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability5.9 Medium
- wordplus better messages, better messages (wordpress plugin) +1 moreWordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability3.1 Low
- social media share buttons project media share buttons, rené hermenau social media share buttons | mashshare (wordpress plugin) +1 moreWordPress Social Media Share Buttons plugin <= 3.8.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- blogifierBlogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage...4.8 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from...5.1 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged...4.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter...5.9 Medium
- atlassian confluence, questions for confluence +1 moreThe Atlassian Questions For Confluence app for Confluence Server and Data Center creates a...9.8 Critical
- atlassian bamboo, bitbucket, crowd +19 more +21 moreA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause...8.8 High
- atlassian bamboo, bitbucket, crowd +19 more +21 moreA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to...9.8 Critical
- iconics genesis64, mitsubishi electric genesis32, iconics suite +1 more +3 moreOut-of-bounds Read vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi...8.2 High
- iconics genesis64, mitsubishi electric genesis32, iconics suite +1 more +3 moreDeserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior...9.8 Critical
- iconics genesis64, mitsubishi electric iconics suite, mc works64 +2 moreDeserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior...7.8 High
- iconics genesis64, mitsubishi electric iconics suite, mc works64 +2 moreDeserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior...7.8 High
- iconics genesis64, mitsubishi electric iconics suite, mc works64 +2 moreInclusion of Functionality from Untrusted Control Sphere vulnerability in ICONICS GENESIS64...7.8 High
- iconics genesis64, mitsubishi electric iconics suite, mc works64 +2 moreDeserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior...7.8 High
- wavlink wn533a8 firmwareAn access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain...7.5 High
- wavlink wl-wn530hg4 firmwareAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers...5.3 Medium
- wavlink wn533a8 firmwareWavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting ...6.1 Medium
- wavlink wl-wn530hg4 firmwareAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain...7.5 High
- wavlink wl-wn530hg4 firmwareWavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption...9.8 Critical
- iconics genesis64, mitsubishi electric iconics suite +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...7.5 High
- anchore, anchore enterprise, anchorectl +2 moreAnchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the…7.5 High
- barangay management system project management systemBarangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- drupal core, drupal +1 moreLack of domain validation in Druple core6.1 Medium
- drupal core, drupal +1 moreDrupal core arbitrary PHP code execution7.2 High
- rockwell automation micrologix 1100, micrologix 1400, rockwellautomation micrologix 1100 firmware +1 more +3 moreICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames6.5 Medium
- drupal core, drupal +1 moreDrupal core Denial of Service vulnerability6.5 Medium
- inductive automation ignitionInductive Automation Ignition6.8 Medium
- drupal core, drupal +1 moreDrupal core Denial of Service vulnerability7.5 High
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials9.8 Critical
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key6.5 Medium
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Improper Authentication9.8 Critical
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Cross-site Scripting7.5 High
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data4.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update5.9 Medium
- juniper junos os evolvedJunos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churn7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An FPC memory leak can occur in an APBR scenario7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic5.3 Medium
- Show moreLoading…