CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- midori-global better pdf exporterThe Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted...6.1 Medium
pkcs11crates.ioSafety issues in `pkcs11`No score- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber6.8 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemr6.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreData Access from Outside Expected Data Manager Component in openemr/openemr8.3 High
- google chromeInappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a...6.5 Medium
- caddyserver caddyWithdrawn Advisory: Out-of-bounds Read can lead to client side denial of service7.5 High
- google chromeUse after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who...8.8 High
- google chromeUse after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote...8.8 High
- google chromeInsufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0...4.3 Medium
- google chromeUse after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to...8.8 High
- google chromeUse after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who...8.8 High
- linux kernel, netapp h300s firmware, h410c firmware +4 more +6 moreUse-after-free in io_uring ad work_flags in Linux Kernel7.5 High
- django-rest-framework django rest frameworkDjango REST framework XSS Vulnerability6.1 Medium
islandora/islandoraPackagistIslandora 2.0 before 2.4.1 could allow any user to upload content into a repository10.0 Criticalio.github.skylot:jadx-coreMavenskylot jadx affected by Incorrect Behavior Order in vulnerable dependencyNo score- oxilab shortcode addons, biplob018 shortcode addons (wordpress plugin) +1 moreWordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability9.8 Critical
- oxilab accordions, biplob adhikari accordions (wordpress plugin) +1 moreWordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability9.8 Critical
- givewp, givewp (wordpress plugin) +1 moreWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability5.5 Medium
- givewp, givewp (wordpress plugin) +1 moreWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability9.1 Critical
- wp maintenance project maintenance, florent maillefaud wp maintenance (wordpress plugin) +1 moreWordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- yikesinc custom product tabs for woocommerce, yikes inc. custom product tabs for woocommerce (wordpress plugin) +1 moreWordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability5.3 Medium
- linux kernelAn out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user...6.1 Medium
- asus aura ready game software development kitThere is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4....7.8 High
- joomunited wp meta seo, wp meta seo (wordpress plugin) +1 moreWordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- talelin lin-cms-spring-bootHardcoded JWT Token in Lin CMS Spring Boot7.5 High
- supersmart.me – walk through, supersmart supersmart.me - walk through +1 moreSupersmart.me – Walk Through access to business information without authentication4.8 Medium
- allnet gmbh - adsl/vdsl router inkl. modem and wlan, allnet all-wr0500ac firmware +1 moreALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass5.9 Medium
- abb rmc-100 (standard), rmc-100-lite, udc +11 more +13 moreABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access8.1 High
- f-secure elements endpoint protection, f-secure and withsecure all f-secure and withsecure endpoint protection products for windows +1 moreLocal Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products4.3 Medium
- sindresorhus file-typefile-type vulnerable to Infinite Loop via malformed MKV file5.5 Medium
- sygnoos popup builder, popup builder (wordpress plugin) +1 moreWordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change5.4 Medium
- openzeppelin contracts, openzeppelin-contracts +1 moreOpenZeppelin Contracts's ERC165Checker may revert instead of returning false7.5 High
- openzeppelin contracts, openzeppelin-contracts +1 moreOpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers7.5 High
- tovyblox tovyTovy before v0.7.51 vulnerable to users logging in as and impersonating other users7.5 High
- tzinfo, debian linux +1 moreTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 High
async-graphqlcrates.ioasync-graphql / async-graphql - @DOS GraphQL Nested Fragments overflow7.5 High- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log...7.5 High
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco nexus dashboardCisco Nexus Dashboard Arbitrary File Write Vulnerability4.9 Medium
- cisco iot control centerCisco IoT Control Center Cross-Site Scripting Vulnerability6.1 Medium
- cisco nexus dashboardCisco Nexus Dashboard Privilege Escalation Vulnerabilities6.0 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- cisco application extension platform, small business rv series router firmware, rv110w firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities4.7 Medium
- Show moreLoading…