CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- js-ini project js-iniPrototype Pollution7.3 High
- conf-cfg-ini project conf-cfg-iniPrototype Pollution7.3 High
- git-archive project git-archiveCommand Injection6.4 Medium
- deferred-exec project deferred-execCommand Injection9.8 Critical
- ntesseract project ntesseractCommand Injection9.8 Critical
- sonar-wrapper project sonar-wrapperCommand Injection9.8 Critical
- codepress visitor statistics, osamaesh wp visitor statistics (wordpress plugin) +1 moreWordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities9.3 Critical
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner...9.1 Critical
- grapesjsCross-site Scripting (XSS)5.4 Medium
- beancount beancount/fava, fava project fava +1 moreCross-site Scripting (XSS) - Reflected in beancount/fava8.0 High
- beancount beancount/fava, fava project fava +1 moreCross-site Scripting (XSS) - Reflected in beancount/fava8.0 High
- simple page transition project page transition, unknown simple page transition +1 moreSimple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown w-dalilW-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- allow svg files project svg files, unknown allow svg files +1 moreAllow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVG5.4 Medium
- emarket-design request a quoteRequest a Quote <= 2.3.7 - CSV Injection8.8 High
- emarket-design request a quoteRequest a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting4.8 Medium
- brizy unysonUnyson < 2.7.27 - Reflected Cross-Site Scripting7.2 High
- tipsandtricks-hq wp video lightboxWP Video Lightbox < 1.9.5 - Reflected Cross-Site Scripting6.1 Medium
- essentialplugin popup anything, unknown popup anything – a marketing popup and lead generation conversions +1 morePopup Anything < 2.1.7 - Reflected Cross-Site Scripting6.1 Medium
- jeroenpeters1986 name directory, name directory project directory +1 moreName Directory < 1.25.3 - Reflected Cross-Site Scripting6.1 Medium
- jeroenpeters1986 name directory, name directory project directory +1 moreName Directory < 1.25.4 - Stored Cross-Site Scripting via CSRF6.1 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager < 4.58 - Sensitive File Disclosure6.5 Medium
- exports and reports project and reports, unknown exports and reports +1 moreExports and Reports < 0.9.2 - Contributor+ CSV Injection8.8 High
- draftpress header footer code managerHeader Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting6.1 Medium
- shareaholic, shareaholic professional social sharing buttons, icons & related posts – shareaholic +1 moreShareaholic < 9.7.6 - Information Disclosure5.3 Medium
- communilink clink officeCommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection...7.5 High
s390-toolsopenSUSESecurity update for s390-toolsNo score- obsidianObsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution...8.0 High
- webminsoftware/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.9.8 Critical
- atos unify openscape bcf, unify openscape branch, unify openscape session border controller +2 moreAn issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify...8.6 High
- tecrail responsive filemanger, responsive filemanager +1 moreTecrail Responsive Filemanger path traversal6.3 Medium
assimpOSS-FuzzHeap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeaderNo scoremrubyOSS-FuzzSegv on unknown address in urshiftNo scoremrubyOSS-FuzzSegv on unknown address in mpz_addNo scoremrubyOSS-FuzzHeap-buffer-overflow in udivNo scorelcmsOSS-FuzzHeap-buffer-overflow in Type_MLU_WriteNo score- openteknik open source social networkOpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary...7.2 High
- mistune project mistune, fedoraproject fedora +1 moreMistune vulnerable to catastrophic backtracking7.5 High
- libreoffice, debian linux +1 moreWeak Master Keys8.8 High
- libreoffice, debian linux +1 moreExecution of Untrusted Macros Due to Improper Certificate Validation7.5 High
- libreofficeExecution of Untrusted Macros Due to Improper Certificate Validation7.5 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.8 High
- anvsoft pdf converter, pdfmate pdf converter pro +1 moreAnvsoft PDFMate PDF Converter Pro memory corruption6.3 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...7.8 High
- apache mxnetReDoS in Apache MXNet RTC Module7.5 High
fastjson2OSS-FuzzTimeout in JsonFuzzerNo scorelcmsOSS-FuzzHeap-buffer-overflow in TetrahedralInterp16No scorepclOSS-FuzzUNKNOWN READ in std::__1::basic_filebuf<char, std::__1::char_traits<char> >::underflowNo scoreharfbuzzOSS-FuzzUNKNOWN READ in OT::avar::map_coordsNo score- revmakx infinitewp client, unspecified infinitewp client plugin +1 moreInfiniteWP Client Plugin injection7.3 High
- Show moreLoading…