CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- wavlink wifi-repeater firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers...6.3 Medium
- wavlink wifi-repeater firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers...5.7 Medium
- wavlink wifi-repeater firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers...8.0 High
- wavlink wl-wn579x3 firmwareWAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows...7.5 High
- joplinapp joplinJoplin is vulnerable to arbitrary code execution9.0 Critical
- filewaveA hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2....7.5 High
- filewaveAn authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2....9.8 Critical
- biplob adhikari tabs (wordpress plugin), oxilab responsive tabs +1 moreWordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability7.2 High
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreCross-site Scripting Vulnerability in USB Backups App8.2 High
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +7 more +9 moreWeak Default SSL use in Port Forwarding Service7.3 High
- openteknik open source social networkOpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML...7.5 High
- inductive automation ignitionThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- inductive automation ignitionThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- inductive automation ignitionThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.1 High
- inductive automation ignitionThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- inductive automation ignitionThis vulnerability allows remote attackers to bypass authentication on affected installations of...7.5 High
logrotateopenSUSESecurity update for logrotateNo scorelogrotateopenSUSESecurity update for logrotateNo score- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site-Scripting in Agent Manager3.5 Low
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site-Scripting in File Manager3.5 Low
- oxilab flipbox, biplob adhikari flipbox (wordpress plugin) +1 moreWordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerability7.2 High
- qr code generator project code generatorA vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to...7.5 High
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information...5.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password...6.8 Medium
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which...6.5 Medium
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a...5.3 Medium
- openteknik open source social networkOpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross...5.4 Medium
- pega infinity, pegasystems pega infinity +1 morePassword authentication bypass vulnerability for local accounts can be used to bypass local...9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle LTI module reflected XSS risk6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Open redirect risk in mobile auto-login feature6.1 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle Stored XSS and blind SSRF possible via SCORM track details6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Arbitrary file read when importing lesson questions7.5 High
- moodle, fedoraproject fedora +1 moreMoodle PostScript Code Injection9.8 Critical
- openteknik open source social networkOpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross...4.8 Medium
- openteknik open source social networkOpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross...5.4 Medium
- hitachi energy msm, hitachienergy modular switchgear monitoring firmware +1 moreHTTP Response Splitting in Hitachi Energy’s MSM Product5.0 Medium
- hitachi energy msm, hitachienergy modular switchgear monitoring firmware +1 moreCross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product5.0 Medium
- openteknik open source social networkOpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross...5.4 Medium
- openkm, openkm document management community +1 moreOpenKM XXE Injection8.5 High
- xopen project xopenCommand Injection9.8 Critical
- otp-generator project otp-generatorInsecure Randomness6.5 Medium
- set-deep-prop project set-deep-propPrototype Pollution7.5 High
- markdown-it-toc project markdown-it-tocCross-site Scripting (XSS)7.3 High
- ffmpeg-sdk project ffmpeg-sdkCommand Injection9.4 Critical
- npm-help project npm-helpCommand Injection9.8 Critical
- google-cloudstorage-commands project google-cloudstorage-commandsCommand Injection7.3 High
- node-import project node-importArbitrary Code Execution8.6 High
- merge project mergePrototype Pollution5.6 Medium
- snyk brokerDirectory Traversal4.9 Medium
- ion-parser project ion-parserPrototype Pollution7.3 High
- Show moreLoading…