CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- scootersoftware beyond compareThere is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter...6.7 Medium
- scootersoftware beyond compareA DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4...7.8 High
xsOSS-FuzzHeap-buffer-overflow in fxGetNextEntityNo scorecrasOSS-FuzzHeap-use-after-free in cras_iodev_list_disable_devNo score- dataeaseSQL Injection found in Dataease8.8 High
- dataeaseDataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin6.5 Medium
- dataeaseDataease before 1.11.2 allows arbitrary code execution via crafter plugin9.8 Critical
- dataeaseDataease v1.11.1 SQL Injection via parameter dataSourceId9.8 Critical
- convert-svg-core project convert-svg-coreRemote Code Injection9.9 Critical
- ambit movie portal scriptItech Movie Portal Script film-rating.php Error sql injection6.3 Medium
- ambit movie portal scriptItech Movie Portal Script artist-display.php Union sql injection6.3 Medium
- ambit movie portal scriptItech Movie Portal Script movie.php Union sql injection6.3 Medium
- multisafepay plugin for woocommerce, plugin for woocommerce (wordpress plugin) +1 moreWordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability5.3 Medium
- wpwax team, team (wordpress plugin) +1 moreWordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- wpwax team, team (wordpress plugin) +1 moreWordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- homepage product organizer for woocommerce project product organizer for woocommerce, wooplugins.co homepage product organizer for woocommerce (wordpress plugin) +1 moreWordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities9.1 Critical
- testimonials project testimonials, chinmoy paul (chinmoy29) testimonials (wordpress plugin) +1 moreWordPress Testimonials plugin <= 3.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.1 Medium
- codexshaper wp oauth2 server, wp oauth2 server (wordpress plugin) +1 moreWordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability5.9 Medium
- supsystic social share buttons, social share buttons by supsystic (wordpress plugin) +1 moreWordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities6.3 Medium
- supsystic social share buttons, social share buttons by supsystic (wordpress plugin) +1 moreWordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities8.5 High
- sygnoos popup builder, popup builder (wordpress plugin) +1 moreWordPress Popup Builder plugin <= 4.1.11 - Cross-Site Request Forgery (CSRF) leading to plugin settings update5.4 Medium
- ambit movie portal scriptItech Movie Portal Script movie.php Reflected cross site scripting4.3 Medium
- ambit movie portal scriptItech Movie Portal Script show_news.php Error sql injection6.3 Medium
- hallo welt! gmbh bluespicePotential XSS on Special:SearchCenter4.3 Medium
- hallo welt! gmbh bluespicePotential XSS in title URL parameter4.3 Medium
- mi smarthomeinformation leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is...7.5 High
- mi soundInformation leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by...7.5 High
- f-secure atlant, all f-secure and withsecure endpoint protection products for windows & mac f-secure linux security 64 f-secure linux security 32 f-secure atlant f-secure internet gatekeeper withsecure cloud protection for salesforce withsecure collaboration protection, cloud protection for salesforce +5 more +7 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- f-secure atlant, all f-secure and withsecure endpoint protection products for mac f-secure linux security (32-bit) f-secure linux security (64-bit) f-secure atlant f-secure internet gatekeeper withsecure cloud protection for salesforce withsecure collaboration protection, cloud protection for salesforce +5 more +7 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- advantech iviewAdvantech iView8.1 High
- advantech iviewAdvantech iView9.8 Critical
- advantech iviewAdvantech iView8.8 High
- advantech iviewAdvantech iView7.5 High
- advantech iviewAdvantech iView8.2 High
- advantech iviewAdvantech iView6.5 Medium
- advantech iviewAdvantech iView4.9 Medium
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys ADS/ADX/OAS with MUI5.3 Medium
- redhat openstackAn Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat...6.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber6.5 Medium
- eziod project eziodThe eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third...9.8 Critical
- scu-captcha project scu-captchaThe scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a...9.8 Critical
- wikifaces project wikifacesThe wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.9.8 Critical
- pycrowdtangle project pycrowdtangleThe PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a...9.8 Critical
- radare radare2Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function...5.5 Medium
- qpdf project qpdfQPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF:...6.5 Medium
- radare radare2Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function...5.5 Medium
- pypiThe bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a...9.8 Critical
- pypiThe bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a...9.8 Critical
- mod wsgi wsgi, debian linux, modwsgi mod wsgi +2 moreIncorrect header handling in mod-wsgi7.5 High
- zulipZulip Server insufficient authorization for changing bot roles5.4 Medium
- Show moreLoading…